⤷ Title: Zero-Day Exploitation: Rapid7 Exposes Remote Code Execution Vulnerability in Gogs
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 09:36:21 +0000
════════════════════════
⌗ Tags: #Vulnerability #branch name command injection payload #git rebase exec flag exploit #Gogs alternative to GitLab GitHub #Gogs argument injection vulnerability #Jonah Burgess Rapid7 Labs discovery #open registration app.ini security risk #Rapid7 vulnerability disclosure policy timeline #self_hosted source code management exploit #software supply chain repository compromise #unpatched self_hosted Git RCE
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 09:36:21 +0000
════════════════════════
⌗ Tags: #Vulnerability #branch name command injection payload #git rebase exec flag exploit #Gogs alternative to GitLab GitHub #Gogs argument injection vulnerability #Jonah Burgess Rapid7 Labs discovery #open registration app.ini security risk #Rapid7 vulnerability disclosure policy timeline #self_hosted source code management exploit #software supply chain repository compromise #unpatched self_hosted Git RCE
Information Security News
Gogs Argument Injection Vulnerability Grants Server RCE
Rapid7 discloses an unpatched Gogs argument injection vulnerability. Learn how a malicious branch name in a git rebase pull request grants full server RCE.
⤷ Title: Branch Target Reuse Spectre-v2 Attack: Full Details and PoC Code Released
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 02:10:42 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Branch Target Reuse #CVE_2026_64507 #CVE_2026_64508 #Linux Kernel #side_channel attack #Spectre_v2 #VUSec
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 02:10:42 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Branch Target Reuse #CVE_2026_64507 #CVE_2026_64508 #Linux Kernel #side_channel attack #Spectre_v2 #VUSec
Daily CyberSecurity
Branch Target Reuse Spectre-v2 Attack: Full Details and PoC Code Released
TL;DR Researchers at VUSec have published full details and proof-of-concept code for Branch Target Reuse (BTR), a new Spectre-v2 attack on just-in-time (JIT) compilers. Their end-to-end exploit le…