CVE-2026-3854-lab

Flagship 实验室 001：从 Git 推送选项到 RCE 一个本地学习实验室和研究实验室，灵感来自 CVE-2026-3854 背后公开记录的漏洞概念。这两种体验都会对 ForgeDock（一个虚构的 Git 服务器）执行真实的经过身份验证的 Git 推送；即研究实验室。 !CAUTION 本项目故意包含漏洞。仅限本地运行。请勿将其端口暴露到公共或共享网络。切勿在生产环境中使用。 !NOTE 本仓库以只读教育参考资料的形式发布。不接受公开的 issue、拉取请求、功能请求或支持请求。请按照SECURITY.md 中的说明私下报告意外的安全边界缺陷。 选择体验 学习实验室...

Exploit_CVE-2026-3854

ExploitCVE-2026-3854 CVE-2026-3854 是 GitHub.com 和 GitHub Enterprise Server 中的一个远程代码执行漏洞。 该漏洞可通过向 git push 命令注入命令来利用，具体如下： root@kitploit: git push -o '' origin master 若要审查该漏洞的任何利用行为，我们建议您检查 /var/log/github-audit.log 中推送操作里包含 ";" 的 push options。 受影响版本： GitHub Enterprise Server = 3.19.1 修复版本：...

CVE-2026-58437

A flaw was found in Gitea. This vulnerability allows an attacker to manipulate repository visibility settings by leveraging specific Git push options. This could lead to unauthorized disclosure of repository information or unintended access control changes. Mitigation Mitigation for this issue is...

CVE-2026-58437 Repository Visibility Manipulation via Git Push Options

Repository Visibility Manipulation via Git Push Options...

CVE-2026-58437

CVE-2026-58437 affects Gitea: Git push options repo.private and repo.template can alter an existing repo’s visibility or template status when pushed by an admin/owner, bypassing standard audits and notifications. Affected code path in routers/private/hook_post_receive.go reads push options and, i...

GO-2026-6047 Gitea: Repository Visibility Manipulation via Git Push Options in gitea.dev

Gitea: Repository Visibility Manipulation via Git Push Options in gitea.dev...

Gitea: Repository Visibility Manipulation via Git Push Options

Repository Visibility Manipulation via Git Push Options | Field | Value | |-------|-------| | Affected File | routers/private/hookpostreceive.go | | Affected Function | HookPostReceive | | Affected Lines | 173–225 | | Prerequisite | Attacker must have owner-level or admin collaborator access to t...

Insufficient Logging

Overview Affected versions of this package are vulnerable to Insufficient Logging through the processing of undocumented git push options in the HookPostReceive function. An attacker can change the visibility or template status of a repository without triggering audit logs, webhooks, or...

Insufficient Logging

Overview Affected versions of this package are vulnerable to Insufficient Logging through the processing of undocumented git push options in the HookPostReceive function. An attacker can change the visibility or template status of a repository without triggering audit logs, webhooks, or...

PT-2026-63303

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description Gitea contains an issue where the post-receive git hook handler incorrectly processes git push options on existing repositories. Users with owner or admin-collaborator access can use the...

CVE-2026-3854

CVE-2026-3854 describes an RCE vulnerability in GitHub Enterprise Server arising during git push option handling. An attacker with push access could abuse unsanitized user-supplied push option values that are incorporated into internal service headers; because the header format uses a delimiter t...