1319 matches found
CVE-2025-8110 File overwrite in file update API in Gogs
Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code...
EUVD-2025-202425
Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code...
CVE-2025-8110
CVE-2025-8110 affects Gogs self-hosted Git service versions 0.13.3 and earlier, due to improper symbolic link handling in PutContents that allows a symlink to target outside the repository, enabling remote code execution. Root cause: API writes to file paths without validating symlinks. Impact: l...
CVE-2025-8110: Improper Limitation of a Pathname to a Restricted Directory
Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code...
Gogs 安全漏洞
Gogs Go Git Service is a self-service Git hosting service based on the Go language by the Gogs team, which supports creating and migrating public/private repositories, adding and removing repository collaborators, and so on. A security vulnerability exists in Gogs, which stems from the mishandlin...
VulnCheck KEV: CVE-2025-8110
Gogs contains a path traversal vulnerability affecting improper Symbolic link handling in the PutContents API that could allow for code execution...
Denial-of-service (DoS)
github.com/argoproj/argo-cd is vulnerable to a Denial-of-service DoS. The vulnerability is due to Argo CD’s /api/webhook endpoint crashing when it receives a malformed Gogs push event with a missing or null commits.repo field, which allows an attacker to send crafted API requests that crash the A...
PT-2025-50327
Name of the Vulnerable Software and Affected Versions Gogs versions prior to 0.13.0 Description A path traversal flaw exists in the PutContents API of Gogs, a self-hosted Git service. The issue stems from improper symbolic link handling, which allows authenticated attackers to bypass security...
GO-2025-3996 argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd
argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload in github.com/argoproj/argo-cd...
EUVD-2018-7071
Malware in sbrugna...
EUVD-2021-1312
Malware in sbrugna...
EUVD-2021-0934
Malware in sbrugna...
EUVD-2021-0961
Malware in sbrugna...
EUVD-2021-1303
Malware in sbrugna...
EUVD-2018-8249
Malware in sbrugna...
EUVD-2021-1361
Malware in sbrugna...
EUVD-2020-30150
Malware in sbrugna...
BIT-ARGO-CD-2025-59537 argo-cd is vulnerable to unauthenticated DoS attack via malformed Gogs webhook payload
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions 1.2.0 through 1.8.7, 2.0.0 through 2.14.19, 3.0.0 through 3.2.0, 3.1.7 and 3.0.18 are vulnerable to malicious API requests which can crash the API server and cause denial of service to legitimate clients. With the...