CVE-2025-8110

CVE-2025-8110 — Gogs RCE PoC Silentium / HackTheBox Haftungsausschluss: Dieses Tool ist ausschließlich für Bildungszwecke und autorisierte Penetrationstests gedacht. Verwenden Sie es nur gegen Systeme, für die Sie eine ausdrückliche Genehmigung zum Testen haben. Dies ist eine modifizierte Version...

CVE-2025-8110

Gogs RCE Exploit CVE-2025-8110 Ein Proof of Concept PoC für CVE-2025-8110 , eine kritische Schwachstelle in Gogs, die Remote-Code-Ausführung RCE durch Manipulation von .git/config mittels symbolischer Link-Umgehungen und sshCommand-Injection ermöglicht. 📖 Übersicht Dieser Exploit zielt auf einen...

gogs-CVE-2025-8110

Gogs CVE-2025-8110 PoC Este repositório contém uma Prova de Conceito PoC para o CVE-2025-8110, uma vulnerabilidade de Execução Remota de Código RCE no Gogs. O exploit tem como alvo a implementação do servidor SSH interno, permitindo que atacantes injetem comandos maliciosos por meio da configuraç...

CVE-2025-8110

Exploit RCE di Gogs CVE-2025-8110 Proof of Concept per CVE-2025-8110 - Esecuzione di codice remoto in Gogs tramite bypass di symlink e iniezione di sshCommand. Descrizione Questo exploit abusa di un bypass di symlink nell'API di Gogs per sovrascrivere .git/config e iniettare un sshCommand malevol...

cve-2025-8110-GOGS-RCE

GOGS RCE cve-2025-8110 Gogs è un servizio Git leggero e auto-ospitato, simile a una versione privata di GitHub, progettato per funzionare facilmente su server con poche risorse. La vulnerabilità CVE-2025-8110 è una grave falla di sicurezza che consente a un attaccante di bypassare le restrizioni...

CVE-2026-76221

GitPython before 3.1.58 contains a config-name injection vulnerability in the option-name validator that allows attackers to forge arbitrary git-config directives by injecting equals signs, hash symbols, and whitespace into option names. Attackers can inject malicious option names like 'sshComman...

CVE-2026-76221 GitPython before 3.1.58 Config Injection via option-name

GitPython before 3.1.58 contains a config-name injection vulnerability in the option-name validator that allows attackers to forge arbitrary git-config directives by injecting equals signs, hash symbols, and whitespace into option names. Attackers can inject malicious option names like 'sshComman...

CVE-2026-76221 GitPython before 3.1.58 Config Injection via option-name

GitPython before 3.1.58 contains a config-name injection vulnerability in the option-name validator that allows attackers to forge arbitrary git-config directives by injecting equals signs, hash symbols, and whitespace into option names. Attackers can inject malicious option names like 'sshComman...

CVE-2026-69097

GitPython before 3.1.53 fails to properly escape section names in git config files, enabling injection of arbitrary configuration directives (e.g., core.sshCommand) via malicious submodule names during create_submodule or clone_from. This can lead to remote code execution when Git performs SSH op...

Sourcegraph gitserver sshCommand RCE

A vulnerability exists within Sourcegraph's gitserver component that allows a remote attacker to execute arbitrary OS commands by modifying the core.sshCommand value within the git configuration. This command can then be triggered on demand by executing a git push operation. The vulnerability was...

PT-2022-3024 · Sourcegraph · Sourcegraph

Name of the Vulnerable Software and Affected Versions: Sourcegraph versions prior to 3.37 Description: The issue is related to the gitserver service in Sourcegraph, which acts as a git exec proxy and fails to properly restrict calling git config. This allows an attacker to set the git...