21792 matches found
CVE-2026-96589
In Gitea , a flaw in the private repository transfer logic allows a recipient to retain persistent read access even after a transfer is rejected or cancelled. When a transfer to a user lacking access is initiated, Gitea grants them temporary read access as a collaborator; however, the system fail...
CVE-2026-79960
The Gitea repository management platform contains a vulnerability where pushes authenticated via deploy keys are incorrectly recorded as being performed by the repository owner. This incorrect authorization (CWE-863) causes permission checks in the push hook pipeline to evaluate the owner's privi...
CVE-2026-70357
The Gitea repository migration feature is vulnerable to a Server-Side Request Forgery (SSRF) via DNS rebinding . While Gitea validates the migration hostname against allow and block lists, the Git subprocess independently resolves the hostname during the Git clone operation . An attacker controll...
CVE-2026-104636
The Gitea platform is vulnerable to a Server-Side Request Forgery (SSRF) flaw. While the system validates initial remote URLs for push mirrors, wiki remote checks, and migrated pull request head fetches, the subsequent raw Git operations follow HTTP redirects without revalidating the new destinat...
CVE-2026-101029
The Gitea repository migration and pull mirror functions are vulnerable to Server-Side Request Forgery (SSRF) due to a Time-of-check Time-of-use (TOCTOU) flaw. Specifically, egress checks can be bypassed using hostnames that return multiple DNS answers , as the address validated by the system may...
CVE-2018-4407
此存储库没有 README。...
CVE-2017-5007
Este repositorio no tiene un README...
CVE-2022-22850
此存储库没有 README。...
poc-CVE-2021-44521
Este repositorio no tiene un README...
CVE-2019-7238
CVE-2019-7238 Nexus Repository Manager RCE Nexus Repository Manager 3 Ejecución remota de código sin autenticación nexus Acerca del eco de comandos: functionx, y, z, c, integer, defineClass c=1.class.forName'java.lang.Character'; integer=1.class;...
Exploits
Este repositorio no tiene un README...
CVE-2024-0520_try
此存储库没有 README。...
sudo_exploit
Este repositorio no tiene un README...
Resources-for-Beginner-Bug-Bounty-Hunters
Recursos-para-Cazadores-de-Bug-Bounty-Principiantes Introducción Versión Actual: 2023.01 ¡Bienvenido a nuestro repositorio de recursos de hacking web y cacería de bug bounty! Aquí tienes una colección curada de herramientas, consejos y recursos de hacking web. Esperamos que este repositorio sea u...
CVE-2017-3599
此存储库没有 README。...
presentations
Presentaciones de SpecterOps Este proyecto contiene presentaciones de varios eventos, charlas y seminarios web patrocinados por SpecterOps...
CVE-2022-4510
Este repositorio no tiene un README...
CVE-2022-44268_By_Kyokito
Este repositorio no tiene un README...
CVE-2026-103620
A missing authorization vulnerability in GitHub Enterprise Server allows repository collaborators with write access to delete the current default branch using the GraphQL API . This flaw enables an attacker to set an attacker-controlled branch as the new default. In repositories requiring pull-re...