CVE-2026-3854

CVE-2026-3854: GitHub RCE via X-Stat 헤더 주입 Wiz Research가 GitHub.com 및 GitHub Enterprise Server의 내부 git push 파이프라인에서 발견한 취약점의 작동 방식에 대한 실용적인 요약입니다. 경고 이 자료는 교육 및 오펜시브 보안 연구 목적으로 제공됩니다. 이 취약점은 GitHub에서 지원되는 모든 버전에서 이미 패치되었습니다. 본인 소유가 아니거나 서면으로 명시적인 테스트 승인을 받지 않은 환경에서 재현을 시도하지 마십시오. 시스템에 대한 무단 접근은...

SEDATED

SEDATED® 프로젝트민감한 엔터프라이즈 데이터 유출 방지 분석기, Sensitive Enterprise Data Analyzer To Eliminate Disclosure는 사용자 자격 증명 및 토큰과 같은 민감한 데이터가 Git에 푸시되는 것을 방지하는 데 중점을 둡니다. 목차 목적 설정 SEDATED® 클론하기 .example 파일 업데이트 /config/customconfigs.sh 변수 및 함수 사용자 정의원하는 대로 조직별 구현을 포함한 SEDATED® 푸시 SEDATED®의 pre-receive.sh 파일로...

CVE-2025-81110-PoC

CVE-2025-81110-PoC Некорректная обработка символических ссылок в API PutContents в Gogs позволяет выполнить локальный код. Этот репозиторий содержит профессиональный эксплойт для критической уязвимости в Gogs версиях до 0.13.0. Эксплойт использует логическую ошибку, при которой API Gogs не...

CVE-2024-44625-Gogs-RCE-0.13.0

CVE-2024-44625 및 Gogs-RCE-0.13.0 리버스 프록시 뒤에 있는 0.13.0 시대의 Gogs를 대상으로 검증되었습니다. 기본 원리: 웹 편집기의 심볼릭 링크 추적을 통해 존재하지 않는 .git/hooks/pre-receive 파일을 생성실행 가능합니다. 이후 해당 저장소에 대한 모든 푸시가 이 훅을 실행합니다. 사용법: 리버스 셸 먼저 리스너 실행: nc -lvnp 4444 python3 gogsrceshell.py --url http://host --user admin1 --pass 'P@ss' ...

GO-2026-6346 Gitea pre-receive hook scanner errors allow branch-protection bypass in code.gitea.io/gitea

Gitea pre-receive hook scanner errors allow branch-protection bypass in code.gitea.io/gitea...

Exploit for Path Traversal in Gogs

CVE-2024-44625 & Gogs-RCE-0.13.0 Validated against a 0.13.0-e...

EUVD-2026-69716

A Server-Side Request Forgery SSRF vulnerability was identified in GitHub Enterprise Server that allowed remote code execution on the instance. Insufficient network isolation allowed malicious pre-receive hook code to impersonate an internal service and redirect trusted internal requests to a...

CVE-2026-76851

A Server-Side Request Forgery SSRF vulnerability was identified in GitHub Enterprise Server that allowed remote code execution on the instance. Insufficient network isolation allowed malicious pre-receive hook code to impersonate an internal service and redirect trusted internal requests to a...

CVE-2026-76851 Server-Side Request Forgery vulnerability in GitHub Enterprise Server allowed remote code execution via network access from pre-receive hooks to internal services

A Server-Side Request Forgery SSRF vulnerability was identified in GitHub Enterprise Server that allowed remote code execution on the instance. Insufficient network isolation allowed malicious pre-receive hook code to impersonate an internal service and redirect trusted internal requests to a...

CVE-2026-76851

A Server-Side Request Forgery (SSRF) vulnerability in GitHub Enterprise Server allowed remote code execution on the instance. The root cause was insufficient network isolation that permitted malicious pre-receive hook code to impersonate an internal service and redirect trusted internal requests ...

CVE-2026-76851 Server-Side Request Forgery vulnerability in GitHub Enterprise Server allowed remote code execution via network access from pre-receive hooks to internal services

A Server-Side Request Forgery SSRF vulnerability was identified in GitHub Enterprise Server that allowed remote code execution on the instance. Insufficient network isolation allowed malicious pre-receive hook code to impersonate an internal service and redirect trusted internal requests to a...

PT-2026-84532

Name of the Vulnerable Software and Affected Versions GitHub Enterprise Server versions prior to 3.22 Description A Server-Side Request Forgery SSRF issue exists where insufficient network isolation allows malicious pre-receive hook code to impersonate an internal service. This enables the...

CVE-2026-76851: Server-Side Request Forgery (SSRF)

A Server-Side Request Forgery SSRF vulnerability was identified in GitHub Enterprise Server that allowed remote code execution on the instance. Insufficient network isolation allowed malicious pre-receive hook code to impersonate an internal service and redirect trusted internal requests to a...

SUSE CVE-2026-27775

Gitea 1.25.5 caches a branch-specific write-permission result across multiple refs in one pre-receive hook session, allowing a per-branch maintainer-edit grant to be reused for other refs and escalate to full repository write access...

GO-2026-6043 Gitea: Cached Per-Branch Permission Check in Pre-Receive Hook Allows Full Repository Write in code.gitea.io/gitea

Gitea: Cached Per-Branch Permission Check in Pre-Receive Hook Allows Full Repository Write in code.gitea.io/gitea...

EUVD-2026-41636

Gitea: Cached Per-Branch Permission Check in Pre-Receive Hook Allows Full Repository Write...

GHSA-649P-MMHF-85C7 Gitea: Cached Per-Branch Permission Check in Pre-Receive Hook Allows Full Repository Write

Vulnerability Header | Field | Value | | ------------------- | ----------------------------------------------------------------------------------- | | Vulnerability Title | Cached Per-Branch Permission Check in Pre-Receive Hook Allows Full Repository Write | | Severity Rating | High | | Bug...

Gitea: Cached Per-Branch Permission Check in Pre-Receive Hook Allows Full Repository Write

Vulnerability Header | Field | Value | | ------------------- | ----------------------------------------------------------------------------------- | | Vulnerability Title | Cached Per-Branch Permission Check in Pre-Receive Hook Allows Full Repository Write | | Severity Rating | High | | Bug...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the pre-receive process. An attacker can gain unauthorized write access to the entire repository by exploiting cached branch-specific write-permission results across multiple refs within a single session...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the pre-receive process. An attacker can gain unauthorized write access to the entire repository by exploiting cached branch-specific write-permission results across multiple refs within a single session...