51 matches found
FreeBSD : gitea -- Multiple vulnerabilities (f4af92f7-95ae-11f1-a6f7-b42e991fc52e)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the f4af92f7-95ae-11f1-a6f7-b42e991fc52e advisory. Gitea reports This release addresses the following security vulnerabilities. Please upgrade as...
gitea -- Multiple vulnerabilities
Gitea reports This release addresses the following security vulnerabilities. Please upgrade as soon as possible. Unauthenticated arbitrary file read via the Org-mode INCLUDE directive. Remote code execution via the diffpatch API through Git hook installation...
Exploit for CVE-2026-60004
CVE-2026-60004-p...
CVE-2026-60004 — Updated!
CVE-2026-60004 Gitea diffpatch RCE ★ CVE-2026-60004 Gitea diffpatch Git Hook RCE PoC ★ Overview CVE-2026-60004 is a Remote Code Execution RCE vulnerability in Gitea. The diffpatch API applies a supplied patch with git apply --cached, which should only update the index and never write files to dis...
Gitea/Forgejo Diffpatch Hook RCE (CVE-2026-60004)
Exploits CVE-2026-60004 in Gitea/Forgejo 1.27.1: register or use supplied credentials, create a repository, submit the same malicious diffpatch twice to trigger an add/add conflict that writes hooks/post-index-change, then execute a command via the auto-fired git hook. !/usr/bin/env python3 --...
Gitea/Forgejo CVE-2026-60004 Diffpatch Detect
Detects Gitea or Forgejo instances potentially affected by CVE-2026-60004 unauthenticated/authenticated diffpatch git hook RCE via bare-clone add/add conflict on hooks/post-index-change. Fixed in Gitea 1.27.1. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Gitea/Forgejo CVE-2026-60004...
Exploit for CVE-2026-60004
CVE-2026-60004 — Gitea diffpatch RCE The diffpatch endpo...
Exploit for CVE-2026-60004
CVE-2026-60004 — Gitea Diffpatch Git Hook RCE Bare Clone Hook In...
Exploit for CVE-2026-60004
CVE-2026-60004 — Gitea Pre-Auth Remote Code Execution CVSS 9...