Lucene search
+L

1316 matches found

Positive Technologies
Positive Technologies
•added 2026/05/28 12:00 a.m.•23 views

PT-2026-45143

Уязвимость функции Merge программного средства создания самоуправляемых Git-репозиториев Gogs связана с внедрением или модификацией аргументов. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код путем отправки специально сформированного запроса...

9CVSS5.8AI score
SaveExploits0References2
GithubExploit
GithubExploit
•added 2026/05/20 12:54 p.m.•147 views

Exploit for Path Traversal in Gogs

CVE-2025-8110 PoC Python proof-of-concept script for triggerin...

8.8CVSS7.8AI score0.85202EPSS
SaveExploits24
GithubExploit
GithubExploit
•added 2026/05/18 3:57 p.m.•138 views

CVE-PoC

CVE-2025-64111 | Software | Gogs...

9.8CVSS5.8AI score0.01395EPSS
SaveExploits3
Veracode
Veracode
•added 2026/05/16 6:40 a.m.•45 views

LFS Object Overwrite

Gogs is vulnerable to LFS object overwrite. The vulnerability is due to overwritable LFS objects across different repositories, where attackers can manipulate the uploaded file like injecting backdoor, and Gogs does not verify uploaded LFS file content against its claimed SHA-256...

9.3CVSS7.5AI score0.00285EPSS
SaveExploits1References4Affected Software1
Veracode
Veracode
•added 2026/05/16 5:35 a.m.•19 views

Cross-site Scripting (XSS)

Gogs is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper sanitization of data: URI schemes in comments and issue descriptions, which allows an attacker to inject and execute arbitrary JavaScript through malicious links...

8.7CVSS8.1AI score0.00438EPSS
SaveExploits1References5Affected Software1
GithubExploit
GithubExploit
•added 2026/05/14 9:15 p.m.•336 views

Exploit for Missing Authentication for Critical Function in Flowiseai Flowise

Silentium — HackTheBox Writeup Platform: HackTheBox...

10CVSS7.6AI score0.86218EPSS
SaveExploits33
BDU FSTEC
BDU FSTEC
•added 2026/04/30 12:00 a.m.•16 views

The vulnerability of the safe() function in the Gogs self-managed Git repository creation tool allows a hacker to perform cross-site scripting attacks.

The vulnerability of the safe function in the Gogs self-managed Git repository creation tool exists because measures to protect the website structure are not taken. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

6.4CVSS7.1AI score0.00343EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/04/30 12:00 a.m.•18 views

The vulnerability of the Gogs self-managed Git repository creation software lies in the possibility of manipulating arguments, allowing attackers to compromise the integrity and accessibility of the protected information.

The vulnerability of the Gogs self-managed Git repository creation software is related to the implementation or modification of arguments. Exploiting this vulnerability allows a malicious actor to compromise the integrity and accessibility of the protected information...

8.5CVSS7.3AI score0.0054EPSS
SaveExploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/04/30 12:00 a.m.•16 views

The vulnerability of the Gogs software tool for creating self-governed Git repositories stems from the lack of protective measures taken against the website structure. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the Gogs self-managed Git repository creation software exists because measures to protect the structure of the web interface have not been implemented. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

8.5CVSS7.1AI score0.00347EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/04/30 12:00 a.m.•15 views

The vulnerability of the application programming interface of the software for creating self-governing Git repositories called Gogs allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the application programming interface of the Gogs self-managed Git repository creation software is related to the disclosure of information through query strings. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to...

5.3CVSS7.3AI score0.00429EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/04/30 12:00 a.m.•13 views

The vulnerability of the Gogs software tool for creating self-governed Git repositories stems from the lack of protective measures taken against the website structure. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the Gogs self-managed Git repository creation software exists because measures to protect the structure of the web interface have not been implemented. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

8.7CVSS7.1AI score0.00438EPSS
SaveExploits1References5Affected Software1
GithubExploit
GithubExploit
•added 2026/04/16 4:40 p.m.•356 views

ffensive-playbook

HackTheBox — Writeups Collection A collection of HackTheBox m...

9.9CVSS7.6AI score0.77836EPSS
SaveExploits31
GithubExploit
GithubExploit
•added 2026/04/16 4:40 p.m.•387 views

ofensive-playbook

HackTheBox — Writeups Collection A collection of HackTheBox m...

9.9CVSS7.6AI score0.77836EPSS
SaveExploits31
GithubExploit
GithubExploit
•added 2026/04/15 9:17 a.m.•181 views

Exploit for Path Traversal in Gogs

CVE-20...

8.8CVSS7.8AI score0.85202EPSS
SaveExploits24
GithubExploit
GithubExploit
•added 2026/04/14 11:03 a.m.•140 views

Exploit for Path Traversal in Gogs

No d...

8.8CVSS7.5AI score0.85202EPSS
SaveExploits24
BDU FSTEC
BDU FSTEC
•added 2026/04/14 12:00 a.m.•16 views

The vulnerability of the Gogs self-managed Git repository creation software lies in its insufficient verification of data authenticity, allowing a violator to re-archive LFS objects.

The vulnerability of the Gogs self-managed Git repository creation software is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow a malicious actor, operating remotely, to re-archive LFS objects...

9.3CVSS7.2AI score0.00285EPSS
SaveExploits1References5Affected Software1
GithubExploit
GithubExploit
•added 2026/04/13 5:42 a.m.•190 views

Exploit for Path Traversal in Gogs

CVE-2025-8110 — Gogs Symlink Traversal → RCE Overview C...

8.8CVSS7.8AI score0.85202EPSS
SaveExploits24
GithubExploit
GithubExploit
•added 2026/04/12 7:20 p.m.•155 views

Exploit for Path Traversal in Gogs

RCE - CVE-2025-59528 Gogs = 0.13.3 Exploit shellsession $...

10CVSS7.8AI score0.86218EPSS
SaveExploits47
GithubExploit
GithubExploit
•added 2026/04/12 12:06 p.m.•197 views

Exploit for Path Traversal in Gogs

Gogs CVE-2025-8110 RCE Exploit An automated Python exploit fo...

8.8CVSS7.8AI score0.85202EPSS
SaveExploits24
GithubExploit
GithubExploit
•added 2026/04/12 5:15 a.m.•182 views

Exploit for Path Traversal in Gogs

CVE-2025-8110-Authenticated-Remote-Code-Execution-on-Gogs-v0.1...

8.8CVSS8AI score0.85202EPSS
SaveExploits24
Rows per page
Query Builder