[agent_peanut]

Designed as an alternative to GitLab or GitHub Enterprise and written in Go, Gogs is often exposed online for remote collaboration.

"Tracked as CVE-2025-8110, this remote code execution (RCE) security flaw stems from a path traversal weakness in the PutContents API and allows authenticated attackers to bypass protections implemented for a previously patched RCE bug (CVE-2024-55947) by overwriting files outside the repository via symbolic links.4"

Shodan query:
http.title:"Sign In - Gogs"

For more read here

[joepa]

Wooow that is an interesting one. Public exploits available?

[agent_peanut]

Wooow that is an interesting one. Public exploits available?

Yeeeee

[Explorers]

CVE's have always been interesting rce's most definitely. I also find browser cve's good. Thanks for sharing

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Contact Administration.