Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Gogs Zero-Day (CVE-2025-8110) Risks RCE for 700+ Servers via Symlink Path Traversal Bypass
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 11 Dec 2025 02:16:08 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_8110 #Git Service #Gogs #Path Traversal #rce #SUPERSHELL #Symlink #zero_day
Daily CyberSecurity
Gogs Zero-Day (CVE-2025-8110) Risks RCE for 700+ Servers via Symlink Path Traversal Bypass
A Gogs zero-day (CVE-2025-8110) bypasses a previous patch, enabling RCE via symlink path traversal. Over 50% of exposed instances are compromised, deploying the Supershell C2. Disable open registration immediately.
19 views
Daily Writeups
⤷ Title: 700+ Instances Hacked: Gogs Zero-Day CVE-2025-8110 Under Active Exploitation
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 13 Dec 2025 10:32:37 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_8110 #cybersecurity #Git Service #Gogs #RCE #remote code execution #Supershell #Symbolic Link #Wiz #zero_day
Penetration Testing Tools
700+ Instances Hacked: Gogs Zero-Day CVE-2025-8110 Under Active Exploitation
Attackers are actively exploiting a newly discovered zero-day vulnerability in Gogs—a widely used self-hosted Git service—for which no
24 views
Daily Writeups
⤷ Title: CISA “Must-Patch” Alert: Critical Gogs Exploit CVE-2025-8110 Active in Wild
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 02:27:08 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CISA #CVE_2024_55947 #CVE_2025_8110 #DevSecOps #Git Security #Gogs #KEV List #Remote Code Execution #vulnerability management #Wiz Research
Daily CyberSecurity
CISA "Must-Patch" Alert: Critical Gogs Exploit CVE-2025-8110 Active in Wild
CISA warns: Active exploits target Gogs Git service via CVE-2025-8110 (CVSS 8.7). Attackers use symlink bypass for RCE. Patch by Feb 2, 2026.
16 views
Daily Writeups
⤷ Title: Triple Threat: Critical Gogs Flaws (CVSS 9.3) Allow RCE & 2FA Bypass
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 00:36:24 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #2FA bypass #CVE_2025_64111 #CVE_2025_64175 #CVE_2026_24135 #Git Service #Gogs #Patch Alert #Path Traversal #Remote Code Execution #Self_Hosted
Daily CyberSecurity
Triple Threat: Critical Gogs Flaws (CVSS 9.3) Allow RCE & 2FA Bypass
Critical Gogs flaws (CVE-2025-64111) allow RCE & 2FA bypass. Attackers can execute commands via .git config. Update to v0.13.4 immediately.
26 views
Daily Writeups
⤷ Title: Critical 9.3 CVSS Flaw in Gogs Turns Repositories into Malware Delivery Vectors
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 00:32:48 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cross_Repository Overwrite #CVE_2026_25921 #cybersecurity #Gogs #infosec #Large File Storage #LFS #Path Collision #supply chain attack #Vulnerability
Daily CyberSecurity
Critical 9.3 CVSS Flaw in Gogs Turns Repositories into Malware Delivery Vectors
A critical 9.3 CVSS flaw (CVE-2026-25921) in Gogs' LFS handling allows attackers to silently overwrite repository files, risking severe supply-chain attacks.
15 views
Daily Writeups
⤷ Title: Zero-Day Exploitation: Rapid7 Exposes Remote Code Execution Vulnerability in Gogs
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 09:36:21 +0000
════════════════════════
⌗ Tags: #Vulnerability #branch name command injection payload #git rebase exec flag exploit #Gogs alternative to GitLab GitHub #Gogs argument injection vulnerability #Jonah Burgess Rapid7 Labs discovery #open registration app.ini security risk #Rapid7 vulnerability disclosure policy timeline #self_hosted source code management exploit #software supply chain repository compromise #unpatched self_hosted Git RCE
Information Security News
Gogs Argument Injection Vulnerability Grants Server RCE
Rapid7 discloses an unpatched Gogs argument injection vulnerability. Learn how a malicious branch name in a git rebase pull request grants full server RCE.
13 views
Daily Writeups
⤷ Title: Public Exploits Released for Three Gogs RCE Flaws, CVSS Up to 10
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 02:00:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_52813 #Git hooks #Gogs #Gogs RCE vulnerability #Path Traversal #proof_of_concept exploit #rce #self_hosted Git
Daily CyberSecurity
Public Exploits Released for Three Gogs RCE Flaws, CVSS Up to 10
Public proof-of-concept code targets three Gogs RCE vulnerabilities scoring up to CVSS 10. Update self-hosted Gogs to version 0.14.3 right now.
12 views