15 matches found
CVE-2025-8110-Gogs-RCE-Exploit
Gogs CVE-2025-8110 RCE Exploit An automated Python exploit for CVE-2025-8110 in Gogs. This vulnerability allows for Remote Code Execution RCE by abusing the PutContents API, which fails to validate if a file path is a symlink. By overwriting the internal .git/config file via a symlink, we can...
CVE-2025-81110-PoC
CVE-2025-81110-PoC Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code. This repository contains a professional-grade exploit for a critical vulnerability in Gogs versions prior to 0.13.0. The exploit leverages a logical flaw where the Gogs API fails to...
CVE-2025-8110
CVE-2025-8110 Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code. How does this detection method work? Extracts the Gogs version from the footer of /user/login via regex Gogs Version: X.X.X and flags instances running version 0.13.3 or earlier as...
CVE-2025-8110
CVE-2025-8110 — Gogs = 0.13.3 Escritura Arbitraria de Archivos mediante Symlink Traversal Resumen Gogs = 0.13.3 es vulnerable a la escritura arbitraria de archivos a través de la API PutContents /api/v1/repos/:owner/:repo/contents/:path. La API valida rutas de archivo para secuencias de directory...
CVE-2025-8110
CVE-2025-8110 — Traversal de enlaces simbólicos en Gogs → RCE Resumen CVE-2025-8110 es una vulnerabilidad crítica en Gogs servicio Git autoalojado versiones = 0.13.3. La API PutContents valida las rutas de archivo contra el recorrido de directorios ../ pero no resuelve los enlaces simbólicos ante...
CVE-2025-8110
Gogs Arbitrary File Write to RCE CVE-2025-8110 - Exploit de Uso Educativo Este repositorio contiene un script de prueba de concepto PoC en Python para demostrar y analizar la vulnerabilidad registrada como CVE-2025-8110 en el servicio de Git auto-alojado Gogs versiones 0.13.3 y anteriores. ⚠️...
CVE-2025-8110
CVE-2025-8110 – Gogs ≤ 0.13.3 RCE PoC Proof-of-Concept for CVE-2025-8110 , an authenticated arbitrary file write in Gogs ≤ 0.13.3 caused by improper symbolic-link handling in the PutContents API. An authenticated user can commit a symlink pointing to .git/config, then use the API to overwrite it...
Gogs <= 0.13.3 - Remote Code Execution
Gogs self-hosted Git service versions 0.13.3 and earlier contain a critical symlink bypass vulnerability that circumvents the fix for CVE-2024-55947. Authenticated users can exploit improper symbolic link handling in the PutContents API to overwrite files outside the repository by committing a...
Exploit for CVE-2025-81110
CVE-2025-81110-PoC Improper Symbolic link handling in the PutC...
Gogs Path Traversal Vulnerability
Gogs contains a path traversal vulnerability affecting improper Symbolic link handling in the PutContents API that could allow for code execution...
SUSE CVE-2025-8110
Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code...
Unpatched Gogs Zero-Day Exploited Across 700+ Instances Amid Active Attacks
A high-severity unpatched security vulnerability in Gogs has come under active exploitation, with more than 700 compromised instances accessible over the internet, according to new findings from Wiz. The flaw, tracked as CVE-2025-8110 CVSS score: 8.7, is a case of file overwrite in the file updat...
Gogs vulnerable to a bypass of CVE-2024-55947
Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code...
