CVE-2025-8110

CVE-2025-8110 — Gogs RCE PoC（Silentium / HackTheBox） 免责声明： 本工具仅供教育目的和授权渗透测试使用。请仅针对您拥有明确测试权限的系统使用。 这是 zAbuQasem/gogs-CVE-2025-8110 的修改版本，已适配 HackTheBox 上的 Silentium 机器。原始 PoC 需要调整以应对 Silentium 特定的 Gogs 配置和认证流程。 漏洞概述 CVE-2025-8110 是 Gogs （一个自托管的 Git 服务）中的一个远程代码执行漏洞。 Gogs 的文件更新 API 端点（PUT...

CVE-2025-8110-Silentium-HTB

CVE-2025-8110 — Gogs RCE PoC（Silentium / HackTheBox） 免责声明： 此工具仅供教育用途及授权渗透测试使用。仅限用于您已获得明确许可的系统。 这是 zAbuQasem/gogs-CVE-2025-8110 的修改版本，已适配针对 HackTheBox 平台上的 Silentium 机器。原始 PoC 需要调整以处理 Silentium 特定的 Gogs 配置和认证流程。 漏洞描述 CVE-2025-8110 是自托管 Git 服务 Gogs 中的一个远程代码执行漏洞。 Gogs 的文件更新 API 端点（PUT...

EUVD-2024-3608

Malicious code in bioql PyPI...

GO-2024-3356 Path Traversal in file update API in gogs in gogs.io/gogs

Path Traversal in file update API in gogs in gogs.io/gogs...

Path Traversal in file update API in gogs

Impact The malicious user is able to write a file to an arbitrary path on the server to gain SSH access to the server. Patches Writing files outside repository Git directory has been prohibited via the repository file update API https://github.com/gogs/gogs/pull/7859. Users should upgrade to 0.13...

GHSA-QF5V-RP47-55GG Path Traversal in file update API in gogs

Impact The malicious user is able to write a file to an arbitrary path on the server to gain SSH access to the server. Patches Writing files outside repository Git directory has been prohibited via the repository file update API https://github.com/gogs/gogs/pull/7859. Users should upgrade to 0.13...

CVE-2024-55947 Gogs has a Path Traversal in file update API

Gogs is an open source self-hosted Git service. A malicious user is able to write a file to an arbitrary path on the server to gain SSH access to the server. The vulnerability is fixed in 0.13.1...

CVE-2024-55947 Gogs has a Path Traversal in file update API

Gogs is an open source self-hosted Git service. A malicious user is able to write a file to an arbitrary path on the server to gain SSH access to the server. The vulnerability is fixed in 0.13.1...

CVE-2024-55947

Gogs self-hosted Git service affected up to version 0.13.3. CVE-2024-55947 enables path traversal via the PutContents API, allowing writing files to arbitrary server paths and potentially SSH access. The issue is fixed in 0.13.1; later advisories (CNAs) discuss bypass attempts and continued scrut...