CVE-2026-25232-PoC

CVE-2026-25232 — Gogs 受保护分支删除绕过（写入 → 管理员权限提升） 概述 字段| 详情 ---|--- CVE| CVE-2026-25232 产品| Gogs（Go Git 服务） 受影响版本| :3001 攻击者账户： attacker:Password123!（对仓库具有写入权限） 目标仓库： admin/important-repo 受保护分支： main（默认分支） 步骤 1 — 确认分支保护已启用 确认该分支已受保护且无法通过正常方式删除： root@kitploit: 尝试通过 API 正常删除分支 - 此操作应失败 curl -s -X DELET...

CVE-2026-25232 Gogs has a Protected Branch Deletion Bypass in Web Interface

Gogs is an open source self-hosted Git service. Versions 0.13.4 and below have an access control bypass vulnerability which allows any repository collaborator with Write permissions to delete protected branches including the default branch by sending a direct POST request, completely bypassing th...

Linux Distros Unpatched Vulnerability : CVE-2021-39931

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.11 before 14.3.6, all versions starting from 14.4 before 14.4.4, all version...