#+HashtagPLUS#Hashtag the Web... #Tag your World!
Join

Menu

New post

#Gogs

5 posts

Feed·
5 of 5 posts
One-Click RCE Hits Flowise While Gogs Zero-Day Stays Unpatched
🖼️
0Read More

One-Click RCE Hits Flowise While Gogs Zero-Day Stays Unpatched

WebProNews·Tim Toole·5 months ago
#3H3vFdVj
#webpronews#flowise#gogs#self#hosted

Public PoC for Flowise CVE-2026-40933 enables one-click RCE via chatflow imports on self-hosted instances. Gogs unauthenticated RCE remains unpatched with Metasploit module available.…

15s
Gogs Git Service Faces Unpatched RCE That Turns Any User Into Server Owner
🖼️
0Read More

Gogs Git Service Faces Unpatched RCE That Turns Any User Into Server Owner

WebProNews·Sara Donnelly·5 months ago
#AlxcCwz3
#webpronews#gogs#repository#rebase#attacker

An unpatched 9.4-severity flaw in the popular self-hosted Git service Gogs lets any authenticated user run arbitrary code by injecting --exec into git rebase via a malicious branch name in a pull request.…

15s
Gogs Zero-Day Exposes Servers to Remote Code Execution: What Security Teams Need to Know
🖼️
0Read More

Gogs Zero-Day Exposes Servers to Remote Code Execution: What Security Teams Need to Know

DEV Community: infosec·Security Cyber·5 months ago
#uhWyUAD2
#dev#gogs#zero#exposes#servers

Gogs Zero-Day Exposes Servers to Remote Code Execution This is worth understanding,...

15s
Critical Unpatched RCE Vulnerability Discovered in Gogs Git Service
🖼️
0Read More

Critical Unpatched RCE Vulnerability Discovered in Gogs Git Service

DEV Community: infosec·BeyondMachines·5 months ago
#vL2E0lgW
#dev#gogs#full#server#beyondmachines

Gogs is reported to have a critical unpatched authenticated RCE vulnerability (CVSS 9.4) that allows users to execute arbitrary code via malicious branch names during rebase operations.…

15s