CVE-2025-8110-PoC

CVE-2025-8110 PoC CVE-2025-8110 के लिए Python प्रूफ-ऑफ-कॉन्सेप्ट स्क्रिप्ट — Gogs v0.13.3 UpdateRepoFile सिमलिंक RCE. एकल-शॉट: दुर्भावनापूर्ण PUT स्वयं git fetch → sshCommand → रिवर्स शेल को ट्रिगर करता है। ⚠️ केवल शैक्षिक और अधिकृत सुरक्षा अनुसंधान के लिए। इस उपकरण को उन सिस्टमों पर चलाना जिनके आ...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection in the UpdateRepoFile function. An attacker can execute arbitrary system commands by updating files within the .git directory remotely via API router. This vulnerability is a bypass for the one addressed in...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection in the UpdateRepoFile function. An attacker can execute arbitrary system commands by updating files within the .git directory remotely via API router. This vulnerability is a bypass for the one addressed in...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection in the UpdateRepoFile function. An attacker can execute arbitrary system commands by updating files within the .git directory remotely via API router. This vulnerability is a bypass for the one addressed in...

OS Command Injection

github.com/gogs/gogs is vulnerable to OS command injection. The vulnerability exists only in windows when the repository upload is enabled, allowing an attacker to upload maliciously crafted config file to the UpdateRepoFile function of repoeditor.go and gain SSH access to the server...