SEDATED

Le projet SEDATED® Sensitive Enterprise Data Analyzer To Eliminate Disclosure se concentre sur la prévention des fuites de données sensibles, telles que les identifiants utilisateur et les jetons, vers Git. Table des matières Objectif Configuration Cloner SEDATED® Mettre à jour les fichiers...

CVE-2024-44625-Gogs-RCE-0.13.0

CVE-2024-44625 и Gogs-RCE-0.13.0 Проверено на Gogs эпохи 0.13.0 за обратным прокси. Примитив: переход по символической ссылке в веб-редакторе на ОТСУТСТВУЮЩИЙ .git/hooks/pre-receive создаёт этот файл исполняемый. Каждый последующий push в репозиторий выполняет его. Использование: Обратная оболочк...

CVE-2026-3854

CVE-2026-3854: RCE в GitHub через инъекцию в заголовок X-Stat Практическое резюме того, как работает уязвимость, обнаруженная Wiz Research во внутреннем конвейере git push GitHub.com и GitHub Enterprise Server. Предупреждение Этот материал предназначен для образовательных целей и исследований в...

CVE-2025-81110-PoC

CVE-2025-81110-PoC La gestion inappropriée des liens symboliques dans l'API PutContents de Gogs permet une exécution locale de code. Ce dépôt contient un exploit de qualité professionnelle pour une vulnérabilité critique dans les versions de Gogs antérieures à 0.13.0. L'exploit tire parti d'un...

SUSE CVE-2026-27780

Gitea versions before 1.26.0 do not fail closed on bufio.Scanner errors while processing pre-receive hook input, allowing oversized input to bypass branch-protection checks...

GO-2026-6346 Gitea pre-receive hook scanner errors allow branch-protection bypass in code.gitea.io/gitea

Gitea pre-receive hook scanner errors allow branch-protection bypass in code.gitea.io/gitea...

Exploit for Path Traversal in Gogs

CVE-2024-44625 & Gogs-RCE-0.13.0 Validated against a 0.13.0-e...

EUVD-2026-69716

A Server-Side Request Forgery SSRF vulnerability was identified in GitHub Enterprise Server that allowed remote code execution on the instance. Insufficient network isolation allowed malicious pre-receive hook code to impersonate an internal service and redirect trusted internal requests to a...

CVE-2026-76851: Server-Side Request Forgery (SSRF)

A Server-Side Request Forgery SSRF vulnerability was identified in GitHub Enterprise Server that allowed remote code execution on the instance. Insufficient network isolation allowed malicious pre-receive hook code to impersonate an internal service and redirect trusted internal requests to a...

PT-2026-84532

Name of the Vulnerable Software and Affected Versions GitHub Enterprise Server versions prior to 3.22 Description A Server-Side Request Forgery SSRF issue exists where insufficient network isolation allows malicious pre-receive hook code to impersonate an internal service. This enables the...

SUSE CVE-2026-27775

Gitea 1.25.5 caches a branch-specific write-permission result across multiple refs in one pre-receive hook session, allowing a per-branch maintainer-edit grant to be reused for other refs and escalate to full repository write access...

GO-2026-6043 Gitea: Cached Per-Branch Permission Check in Pre-Receive Hook Allows Full Repository Write in code.gitea.io/gitea

Gitea: Cached Per-Branch Permission Check in Pre-Receive Hook Allows Full Repository Write in code.gitea.io/gitea...

EUVD-2026-41636

Gitea: Cached Per-Branch Permission Check in Pre-Receive Hook Allows Full Repository Write...

GHSA-649P-MMHF-85C7 Gitea: Cached Per-Branch Permission Check in Pre-Receive Hook Allows Full Repository Write

Vulnerability Header | Field | Value | | ------------------- | ----------------------------------------------------------------------------------- | | Vulnerability Title | Cached Per-Branch Permission Check in Pre-Receive Hook Allows Full Repository Write | | Severity Rating | High | | Bug...

Gitea: Cached Per-Branch Permission Check in Pre-Receive Hook Allows Full Repository Write

Vulnerability Header | Field | Value | | ------------------- | ----------------------------------------------------------------------------------- | | Vulnerability Title | Cached Per-Branch Permission Check in Pre-Receive Hook Allows Full Repository Write | | Severity Rating | High | | Bug...

Gitea pre-receive hook scanner errors allow branch-protection bypass

Gitea versions before 1.26.0 do not fail closed on bufio.Scanner errors while processing pre-receive hook input, allowing oversized input to bypass branch-protection checks...

GHSA-VHQ7-FWWH-7HJF Gitea pre-receive hook scanner errors allow branch-protection bypass

Gitea versions before 1.26.0 do not fail closed on bufio.Scanner errors while processing pre-receive hook input, allowing oversized input to bypass branch-protection checks...

CVE-2026-27780

Gitea versions before 1.26.0 do not fail closed on bufio.Scanner errors while processing pre-receive hook input, allowing oversized input to bypass branch-protection checks...

CVE-2026-27775

Gitea 1.25.5 caches a branch-specific write-permission result across multiple refs in one pre-receive hook session, allowing a per-branch maintainer-edit grant to be reused for other refs and escalate to full repository write access...

CVE-2026-27775

Gitea 1.25.5 caches a branch-specific write-permission result across multiple refs in one pre-receive hook session, allowing a per-branch maintainer-edit grant to be reused for other refs and escalate to full repository write access...