CVE-2026-89182

With repository FORCEPRIVATE = true, Gitea creates new repositories as private, but the post-receive hook still applied the repo.private=false push option to an empty repository created by push. Any user who can create repositories could make their new repository public in violation of the instan...

CVE-2026-97208

The Gitea API endpoint for creating push mirrors POST /api/v1/repos/owner/repo/pushmirrors checked only whether mirroring was enabled and not the mirror DISABLENEWPUSH setting that the web interface enforces. A repository administrator could therefore create new push mirrors on instances where th...

CVE-2026-104633

When migrating a repository from another Gitea instance, Gitea used the page size reported in the source server's API settings to end its paginated downloads. A source that reported maxresponseitems as 0 made these loops run indefinitely and grow server memory until it was exhausted. Any user who...

CVE-2025-3969-Exploit

このリポジトリには README がありません。...

0days

This repository does not have a README...

CVE-2024-38063

此存储库没有 README。...

CVE-2020-13640

このリポジトリには README がありません。...

CVE-2022-40684

此存储库没有 README。...

cve-2018-6574

このリポジトリには README がありません。...

Ubuntu-LPE

このリポジトリには README がありません。...

CVE-2010-3333-reproduction

このリポジトリには README がありません。...

CVE-2019-0708

CVE-2019-0708 CVE-2019-0708 抱歉大家。这是我们团队的测试程序，不是标题党。 如果你认为我们另有目的，请重新审视你自己。 如果你想责怪，我不在乎。 感谢 @testanull，抱歉我的英语不好。 我不明白人们想从这个仓库得到什么？...

WINspect

このリポジトリには README がありません。...

malware_training_vol1

malwaretrainingvol1 Materials for Windows Malware Analysis training volume 1 🚧 WARNING: work in progress! More material will be added gradually. Content The goal of this training it to build understanding of various common techniques used by malware. It contains elements of programming as well as...

CVE-2026-89182

A flaw in Gitea allows authenticated users with repository creation privileges to bypass instance privacy policies. When [repository] FORCE_PRIVATE = true is enabled, the post-receive hook incorrectly applies the repo.private=false push option to empty repositories created via push. This allows u...

CVE-2026-89182 Gitea push-to-create bypass of FORCE_PRIVATE policy

With repository FORCEPRIVATE = true, Gitea creates new repositories as private, but the post-receive hook still applied the repo.private=false push option to an empty repository created by push. Any user who can create repositories could make their new repository public in violation of the instan...

CVE-2026-104633 Gitea migration memory exhaustion from zero page size

When migrating a repository from another Gitea instance, Gitea used the page size reported in the source server's API settings to end its paginated downloads. A source that reported maxresponseitems as 0 made these loops run indefinitely and grow server memory until it was exhausted. Any user who...

CVE-2026-104633

The Gitea platform is vulnerable to a denial of service during repository migration from another Gitea instance. The root cause is an uncontrolled resource consumption (CWE-400) where the application uses the source server's max_response_items setting to determine pagination limits. If a source s...

CVE-2022-22851

此存储库没有 README。...

CVE-2026-10817

CVE-2026-10817 捐赠 帮助维护此项目 如果您觉得此项目有用，请考虑通过 PayPal 或 ABA Mobile 支持其持续维护。 ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ 每笔捐赠的百分之十将捐献给 Kantha Bopha 儿童医院。 | 选择支付方式 使用 ABA Mobile 扫描 · 点击放大 ---|--- ⚡ 简单用法 直接从 GitHub 运行最新版本的外部下载脚本： bash 此命令需要 Bash 和...