#GoGS - Twitter Hashtag

omvapt @omvapt

1 day ago

#Gogs #patches critical #zero_day enabling #remote_code_execution https://t.co/CYv9JWVOwi

0

7

クロネコ @96neko

3 days ago

信頼は一枚板じゃない #BPF 検証、#Gogs 引数注入、#GPG 分裂境界を分解する #Linux #OSS トレンド 2026/6/10... https://t.co/5DxO0sc6dy @YouTubeより

0

42

dopen🇺🇦

@DensukeO

3 days ago

更新されたよ、見に来てね!→ 信頼は一枚板じゃない #BPF 検証、#Gogs 引数注入、#GPG 分裂境界を分解する #Linux #OSS トレンド 2026/6/10 #News #Security https://t.co/2aaASRZfRt

0

22

dopen🇺🇦

@DensukeO

3 days ago

更新されたよ、見に来てね!→ 【ダイジェスト】信頼は一枚板じゃない #BPF 検証、#Gogs 引数注入、#GPG 分裂境界を分解する #Linux #OSS トレンド 2026/6/10 #News #Security https://t.co/CVjzLdyrUD

0

23

Hephaestvs @Vulcanux_

3 days ago

csirt_it: ‼ #Gogs: aggiornamenti di sicurezza risolvono diverse vulnerabilità, tra cui una #0day con #PoC Rischio: 🔴 Tra le tipologie: 🔸 Remote Code Execution 🔸 Arbitrary File Write 🔸 Privilege escalation 🔗https://t.co/CMLKVvyQPE ⚠ Importante …

Vulcanux_'s tweet photo. csirt_it: ‼ #Gogs: aggiornamenti di sicurezza risolvono diverse vulnerabilità, tra cui una #0day con #PoC

Rischio: 🔴

Tra le tipologie:
🔸 Remote Code Execution
🔸 Arbitrary File Write
🔸 Privilege escalation

🔗https://t.co/CMLKVvyQPE

⚠ Importante … https://t.co/9wWyYz6jbr

0

27

CSIRT Italia @csirt_it

3 days ago

‼ #Gogs: aggiornamenti di sicurezza risolvono diverse vulnerabilità, tra cui una #0day con #PoC Rischio: 🔴 Tra le tipologie: 🔸 Remote Code Execution 🔸 Arbitrary File Write 🔸 Privilege escalation 🔗https://t.co/8IwjZd4yW5 ⚠ Importante mantenere aggiornati i sistemi

csirt_it's tweet photo. ‼ #Gogs: aggiornamenti di sicurezza risolvono diverse vulnerabilità, tra cui una #0day con #PoC

Rischio: 🔴

Tra le tipologie:
🔸 Remote Code Execution
🔸 Arbitrary File Write
🔸 Privilege escalation

🔗https://t.co/8IwjZd4yW5

⚠ Importante mantenere aggiornati i sistemi https://t.co/qXsCtCZIsS

0

1

0

Cybersecurity News Everyday

@TweetThreatNews

4 days ago

Gogs patched a critical zero-day argument injection flaw that could expose private repos, steal credentials, and enable remote code execution on internet-facing instances. #Gogs #RemoteCode #SourceCode https://t.co/JjjiPZxRHv

0

1

0

113

it security @it__security

8 days ago

Eine ungepatchte Schwachstelle im Git-Dienst #Gogs erlaubt authentifizierten Nutzern die Codeausführung auf Servern. Rapid7 veröffentlicht ein Exploit-Modul. https://t.co/IFQ1rcCCAT

0

3

1

0

189

The Hacker News @TheHackersNews

13 days ago

Self-hosted #Gogs instances with public registration enabled are at highest risk right now. Attackers can create their own accounts and fully compromise the server in minutes using the malicious branch name exploit. A ready-to-use #Metasploit module makes this even more dangerous for exposed instances. Disable public sign-ups and repository creation immediately until Gogs ships a patch.

The Hacker News @TheHackersNews

15 days ago

⚠️ Critical UNPATCHED 9.4 RCE flaw in Gogs lets any authenticated user execute arbitrary code on the server. An attacker can simply use a malicious branch name during the rebase-before-merge process. No admin rights or victim interaction needed. No CVE issued. Full report and mitigations: https://t.co/zGT4yicz4W

TheHackersNews's tweet photo. ⚠️ Critical UNPATCHED 9.4 RCE flaw in Gogs lets any authenticated user execute arbitrary code on the server.

An attacker can simply use a malicious branch name during the rebase-before-merge process. No admin rights or victim interaction needed.

No CVE issued. Full report and mitigations: https://t.co/zGT4yicz4W

3

146

38

36

40K

3

88

20

7

22K

Benediktus Sava @SavaBenediktus

13 days ago

Gogs Argument Injection RCE: Ketika --exec Flag Bocor ke git rebase - Ethical Hacking Indonesia. #ethicalhackingindonesia #RCE #Gogs https://t.co/v8bgypBcD0

0

7

2

4

368

Daily CyberSecurity @the_yellow_fall

14 days ago

Rapid7 discloses an unpatched Gogs argument injection vulnerability. Learn how a malicious branch name in a git rebase pull request grants full server RCE. #Gogs #CyberSecurity #ZeroDay #RCE #Git #OpenSource #Infosec2026 #ThreatIntel #AppSec #SysAdmin https://t.co/PHRyqqU9Ds

the_yellow_fall's tweet photo. Rapid7 discloses an unpatched Gogs argument injection vulnerability. Learn how a malicious branch name in a git rebase pull request grants full server RCE.

#Gogs #CyberSecurity #ZeroDay #RCE #Git #OpenSource #Infosec2026 #ThreatIntel #AppSec #SysAdmin
https://t.co/PHRyqqU9Ds https://t.co/uFtXuoOtwu

0

4

0

1

353

Cybersecurity News Everyday

@TweetThreatNews

15 days ago

New Gogs zero-day lets authenticated non-admin users trigger remote code execution on exposed servers. Affects Gogs 0.14.2 and 0.15.0+dev, risking repo theft, credential exposure, and lateral movement. #Gogs #Rapid7 #RCE https://t.co/lhNA99dxKv

0

2

0

153

Daily CyberSecurity @the_yellow_fall

3 months ago

A critical 9.3 CVSS flaw (CVE-2026-25921) in Gogs' LFS handling allows attackers to silently overwrite repository files, risking severe supply-chain attacks. #Gogs #CVE #CyberSecurity #SupplyChainAttack #LFS #Vulnerability #InfoSec #AppSec #DevSecOps https://t.co/2Y881C7wpO

the_yellow_fall's tweet photo. A critical 9.3 CVSS flaw (CVE-2026-25921) in Gogs' LFS handling allows attackers to silently overwrite repository files, risking severe supply-chain attacks.

#Gogs #CVE #CyberSecurity #SupplyChainAttack #LFS #Vulnerability #InfoSec #AppSec #DevSecOps
https://t.co/2Y881C7wpO https://t.co/zHLKOriEQb

0

6

1

420

Gogs @GogsHQ

4 months ago

🥳 #Gogs 0.14.2 has just been released! Including security patches. Read more at https://t.co/sHFwSKSdVj

0

2

1

178

Gogs @GogsHQ

5 months ago

🥳 #Gogs 0.13.4 has just been released! Including security patches. Read more at https://t.co/SvWL0ti9Vd

0

6

1

2

249

Mr.Rabbit

@01ra66it

5 months ago

CISAがGogsの致命的脆弱性CVE-2025-8110をMust Patch指定。既に実悪用中で、Gitサーバ侵害からコード改ざんやCI/CD侵入が可能。GogsはTier0資産。即アップデートか外部遮断必須。#CVE20258110 #Gogs #SupplyChain https://t.co/gnGbxormcQ

0

2

0

448

IT-ADMlNISTRATOR

@ita_blog

6 months ago

Zero-Day-Angriffe auf den #Git-Dienst #Gogs 🚨 Eine Symlink-#Schwachstelle erlaubt Remote Code Execution trotz früherer Fixes. Über 700 öffentlich erreichbare Instanzen sollen bereits kompromittiert sein. Betreiber sollten dringend handeln: https://t.co/Dc5W9Zi7P7