CVE-2025-8110

CVE-2025-8110 - Gogs symlink bypass: arbitrary file write as the Gogs process user PoC Proof-of-concept for CVE-2025-8110, a symlink-following flaw in Gogs //contents/. Gogs follows the symlink and writes attacker-controlled bytes to the link target with the privileges of the Gogs process. When...

Malicious code in sui-move-gql (npm)

Source: amazon-inspector e0d32aaadd6f2f9e7febdc74278d21a613be170411c50a382228f51e47447e53 On require of the package, lib/diagnostics.js reads /.sui/sui.keystore, files under /.sui/suiconfig/, /.aws/credentials, and /.aws/config from the installer's home directory, base64-encodes them, and PUTs th...

Malicious code in move-bcs-codec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c00077e83bd841dae96e61d432da796cf21839a32e5caf03e7256b2573225335 [email protected] declares a postinstall hook package.json line 7: "postinstall": "node install.js" that runs install.js on npm install. install.j...

Exploit for Path Traversal in Gogs

Gogs Arbitrary File Write to RCE CVE-2025-8110 - Exploit de...

CVE-2026-35397 jupyter-server path traversal allows access to sibling directories sharing root_dir name prefix

Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, a path traversal vulnerability in the REST API allows an authenticated user to escape the configured rootdir and access sibling directories whose names begin with the same prefix as the rootdir. For exampl...

CVE-2022-46258: Incorrect Authorization

An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed a repository-scoped token with read/write access to modify Action Workflow files without a Workflow scope. The Create or Update file contents API should enforce workflow scope. This vulnerability...

PT-2023-14888 · Github · Github Enterprise Server

Name of the Vulnerable Software and Affected Versions: GitHub Enterprise Server versions prior to 3.7 GitHub Enterprise Server versions 3.3 through 3.3.15 GitHub Enterprise Server versions 3.4 through 3.4.10 GitHub Enterprise Server versions 3.5 through 3.5.7 GitHub Enterprise Server versions 3.6...