CVE-2024-45337

Proof of Concept exploit for CVE-2024-45337 This repository contains a proof of concept exploit for CVE-2024-45337. It can be used to wrap ssh when interacting with an SSH server which is implemented using golang.org/x/crypto = v0.30.0. while caching permissions in the...

CVE-2025-68937

CVE-2025-68937 - Gitea/Forgejo Template Symlink RCE Automated proof-of-concept for CVE-2025-68937 : directory traversal via symlink dereferencing in Gitea and Forgejo template repository processing, leading to remote code execution. Any authenticated user no admin required can obtain a shell as t...

Gitea-Forgejo-CVE-2025-68937

Arbitrary template expansion vulnerability in Gitea and Forgejo This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License. Summary While checking Forgejo's and Gitea's source code to better understand how templating is performed, I discovered a vulnerability...

CVE-2026-60004

CVE-2026-60004 — Gitea Diffpatch Git Hook RCE Bare Clone Hook Injection → post-index-change → Arbitrary Command Execution Overview CVE-2026-60004 is a critical-severity CVSS 9.8 pre-authentication remote code execution vulnerability in Gitea and Forgejo self-hosted Git platforms, affecting versio...

Gitea/Forgejo Diffpatch Hook RCE (CVE-2026-60004)

Exploits CVE-2026-60004 in Gitea/Forgejo 1.27.1: register or use supplied credentials, create a repository, submit the same malicious diffpatch twice to trigger an add/add conflict that writes hooks/post-index-change, then execute a command via the auto-fired git hook. !/usr/bin/env python3 --...

Exploit for CVE-2025-68937

CVE-2025-68937 - Gitea/Forgejo Template Symlink RCE Automated...