CVE-2025-8110

Gogs Arbitrary File Write to RCE CVE-2025-8110 - Exploit à usage éducatif Ce dépôt contient un script de preuve de concept PoC en Python pour démontrer et analyser la vulnérabilité référencée sous le nom CVE-2025-8110 dans le service Git auto-hébergé Gogs versions 0.13.3 et antérieures. ⚠️ Clause...

CVE-2025-8110-Gogs-RCE-Exploit

Gogs CVE-2025-8110 RCE Exploit Автоматизированный Python-эксплойт для CVE-2025-8110 в Gogs. Эта уязвимость позволяет выполнять удаленный код RCE путем злоупотребления API PutContents, который не проверяет, является ли путь к файлу символической ссылкой. Перезаписывая внутренний файл .git/config...

Gogs <= 0.13.3 - Remote Code Execution

Gogs self-hosted Git service versions 0.13.3 and earlier contain a critical symlink bypass vulnerability that circumvents the fix for CVE-2024-55947. Authenticated users can exploit improper symbolic link handling in the PutContents API to overwrite files outside the repository by committing a...

CVE-2025-81110-PoC

CVE-2025-81110-PoC La gestion inappropriée des liens symboliques dans l'API PutContents de Gogs permet une exécution locale de code. Ce dépôt contient un exploit de qualité professionnelle pour une vulnérabilité critique dans les versions de Gogs antérieures à 0.13.0. L'exploit tire parti d'un...

CVE-2025-8110

CVE-2025-8110 Некорректная обработка символических ссылок в API PutContents в Gogs позволяет локальное выполнение кода. Как работает этот метод обнаружения? Извлекает версию Gogs из нижнего колонтитула /user/login с помощью регулярного выражения Gogs Version: X.X.X и помечает экземпляры, работающ...

CVE-2025-8110

CVE-2025-8110 — Gogs = 0.13.3 - Beliebiges Datei-Schreiben via Symlink-Traversal Übersicht Gogs = 0.13.3 ist anfällig für beliebiges Datei-Schreiben über die PutContents-API /api/v1/repos/:owner/:repo/contents/:path. Die API validiert Dateipfade auf Verzeichnistraversierungs-Sequenzen ../, löst...

CVE-2025-8110

CVE-2025-8110 — Symlink-Pfad-Traversal in Gogs → RCE Überblick CVE-2025-8110 ist eine kritische Schwachstelle im Gogs selbst gehosteter Git-Dienst in Versionen = 0.13.3. Die PutContents-API validiert Dateipfade auf Verzeichnis-Traversal ../, löst jedoch keine symbolischen Links vor dem Schreiben...

CVE-2025-8110

CVE-2025-8110 – PoC RCE per Gogs ≤ 0.13.3 Proof-of-Concept per CVE-2025-8110 , una scrittura arbitraria di file autenticata in Gogs ≤ 0.13.3 causata da una gestione impropria dei link simbolici nell'API PutContents. Un utente autenticato può eseguire il commit di un symlink che punta a .git/confi...

Exploit for Path Traversal in Gogs

Gogs CVE-2025-8110 RCE Exploit An automated Python exploit fo...

Exploit for CVE-2025-81110

CVE-2025-81110-PoC Improper Symbolic link handling in the PutC...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization in the PutContents function accessible via the /repos/:owner/:repo/contents/ endpoint. A user with read permissions can modify repository contents via git push. Remediation Upgrade...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization in the PutContents function accessible via the /repos/:owner/:repo/contents/ endpoint. A user with read permissions can modify repository contents via git push. Remediation Upgrade gogs.io/gogs/internal/database to...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization in the PutContents function accessible via the /repos/:owner/:repo/contents/ endpoint. A user with read permissions can modify repository contents via git push. Remediation Upgrade gogs.io/gogs/internal/osutil to...

Gogs Path Traversal Vulnerability

Gogs contains a path traversal vulnerability affecting improper Symbolic link handling in the PutContents API that could allow for code execution...

SUSE CVE-2025-8110

Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code...

The vulnerability in the application software interface of the PutContents tool, which is used for creating self-managed Git repositories like Gogs, allows a perpetrator to execute arbitrary code.

The vulnerability of the PutContents application programming interface of the Gogs self-managed Git repository creation tool is related to an incorrect limitation on the path name for the directory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by introduci...

Improper Symbolic Link Handling

Gogs is vulnerable to Improper Symbolic Link Handling. The vulnerability is due to the PutContents API not properly validating or restricting symbolic links, which allows an attacker to manipulate file paths and execute code locally on the system...

CVE-2025-8110

Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code...

Exploit for CVE-2025-8110

CVE-2025-8110 Improper Symbolic link handling in the PutCont...

Unpatched Gogs Zero-Day Exploited Across 700+ Instances Amid Active Attacks

A high-severity unpatched security vulnerability in Gogs has come under active exploitation, with more than 700 compromised instances accessible over the internet, according to new findings from Wiz. The flaw, tracked as CVE-2025-8110 CVSS score: 8.7, is a case of file overwrite in the file updat...