1170 matches found
Critical Gogs RCE Vulnerability Lets Any Authenticated User Execute Arbitrary Code
A critical security vulnerability has been disclosed in Gogs, a popular open-source self-hosted Git service, that allows an authenticated user to execute arbitrary code under certain conditions. The security flaw, per Rapid7, is rated 9.4 on the CVSS scoring system. It does not have a CVE...
gogs-rce
Gogs RCE — Argument Injection in git rebase CWE-88 Authen...
CVE-2026-52806: Authenticated RCE via Argument Injection in Gogs (FIXED as of June 7, 2026)
Overview Rapid7 Labs discovered a critical argument injection CWE-88 vulnerability in Gogs, a popular open-source self-hosted Git service, tracked as CVE-2026-52806. The vulnerability, scored as CVSSv3.1 9.9 Critical, allows any authenticated user to achieve remote code execution RCE on the serve...
PT-2026-45143
Уязвимость функции Merge программного средства создания самоуправляемых Git-репозиториев Gogs связана с внедрением или модификацией аргументов. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код путем отправки специально сформированного запроса...
Exploit for Path Traversal in Gogs
CVE-2025-8110 PoC Python proof-of-concept script for triggerin...
CVE-PoC
CVE-2025-64111 | Software | Gogs...
LFS Object Overwrite
Gogs is vulnerable to LFS object overwrite. The vulnerability is due to overwritable LFS objects across different repositories, where attackers can manipulate the uploaded file like injecting backdoor, and Gogs does not verify uploaded LFS file content against its claimed SHA-256...
Cross-site Scripting (XSS)
Gogs is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper sanitization of data: URI schemes in comments and issue descriptions, which allows an attacker to inject and execute arbitrary JavaScript through malicious links...
Exploit for Missing Authentication for Critical Function in Flowiseai Flowise
Silentium — HackTheBox Writeup Platform: HackTheBox...
ffensive-playbook
HackTheBox — Writeups Collection A collection of HackTheBox m...
ofensive-playbook
HackTheBox — Writeups Collection A collection of HackTheBox m...
Exploit for Path Traversal in Gogs
CVE-20...
Exploit for Path Traversal in Gogs
No d...
Exploit for Path Traversal in Gogs
CVE-2025-8110 — Gogs Symlink Traversal → RCE Overview C...
Exploit for Path Traversal in Gogs
RCE - CVE-2025-59528 Gogs = 0.13.3 Exploit shellsession $...
Exploit for Path Traversal in Gogs
Gogs CVE-2025-8110 RCE Exploit An automated Python exploit fo...
Exploit for Path Traversal in Gogs
CVE-2025-8110-Authenticated-Remote-Code-Execution-on-Gogs-v0.1...
Exploit for Path Traversal in Gogs
GOGS RCE cve-2025-8110 Gogs is a lightweight and self-hosted...