#goGS - Twitter Hashtag

4 months ago

Public proof-of-concept code targets three Gogs RCE vulnerabilities scoring up to CVSS 10. Update self-hosted Gogs to version 0.14.3 right now. #Gogs #RCE #CyberSecurity #PatchNow #DevSecOps https://t.co/rD6zhSwnCw

Daily_CyberSec's tweet photo. Public proof-of-concept code targets three Gogs RCE vulnerabilities scoring up to CVSS 10. Update self-hosted Gogs to version 0.14.3 right now.

#Gogs #RCE #CyberSecurity #PatchNow #DevSecOps
https://t.co/rD6zhSwnCw https://t.co/rMdsDt6aNO

0

6

0

1

676

CSIRT Italia @csirt_it

4 months ago

‼ #Gogs: disponibili #PoC per lo sfruttamento di 20 nuove vulnerabilità Rischio: 🟠 Tra le tipologie: 🔸 Remote Code Execution 🔸 Authentication Bypass 🔸 Privilege Escalation 🔗https://t.co/6s6sFI9vcL ⚠ Importante mantenere aggiornati i sistemi

csirt_it's tweet photo. ‼ #Gogs: disponibili #PoC per lo sfruttamento di 20 nuove vulnerabilità

Rischio: 🟠

Tra le tipologie:
🔸 Remote Code Execution
🔸 Authentication Bypass
🔸 Privilege Escalation

🔗https://t.co/6s6sFI9vcL

⚠ Importante mantenere aggiornati i sistemi https://t.co/lAvHlpfljM

0

2

0

Gogs @GogsHQ

4 months ago

🥳 #Gogs 0.14.3 has just been released! Including security patches. Read more at https://t.co/aUEBeHSwRy

0

3

1

190

it security @it__security

4 months ago

Eine ungepatchte Schwachstelle im Git-Dienst #Gogs erlaubt authentifizierten Nutzern die Codeausführung auf Servern. Rapid7 veröffentlicht ein Exploit-Modul. https://t.co/IFQ1rcCCAT

0

3

1

0

194

The Hacker News @TheHackersNews

5 months ago

Self-hosted #Gogs instances with public registration enabled are at highest risk right now. Attackers can create their own accounts and fully compromise the server in minutes using the malicious branch name exploit. A ready-to-use #Metasploit module makes this even more dangerous for exposed instances. Disable public sign-ups and repository creation immediately until Gogs ships a patch.

The Hacker News @TheHackersNews

5 months ago

⚠️ Critical UNPATCHED 9.4 RCE flaw in Gogs lets any authenticated user execute arbitrary code on the server. An attacker can simply use a malicious branch name during the rebase-before-merge process. No admin rights or victim interaction needed. No CVE issued. Full report and mitigations: https://t.co/zGT4yicz4W

TheHackersNews's tweet photo. ⚠️ Critical UNPATCHED 9.4 RCE flaw in Gogs lets any authenticated user execute arbitrary code on the server.

An attacker can simply use a malicious branch name during the rebase-before-merge process. No admin rights or victim interaction needed.

No CVE issued. Full report and mitigations: https://t.co/zGT4yicz4W

3

142

36

34

40K

4

86

18

6

23K

Benediktus Sava @SavaBenediktus

5 months ago

Gogs Argument Injection RCE: Ketika --exec Flag Bocor ke git rebase - Ethical Hacking Indonesia. #ethicalhackingindonesia #RCE #Gogs https://t.co/v8bgypBcD0

0

7

2

4

387

Daily CyberSecurity @Daily_CyberSec

5 months ago

Rapid7 discloses an unpatched Gogs argument injection vulnerability. Learn how a malicious branch name in a git rebase pull request grants full server RCE. #Gogs #CyberSecurity #ZeroDay #RCE #Git #OpenSource #Infosec2026 #ThreatIntel #AppSec #SysAdmin https://t.co/PHRyqqU9Ds

Daily_CyberSec's tweet photo. Rapid7 discloses an unpatched Gogs argument injection vulnerability. Learn how a malicious branch name in a git rebase pull request grants full server RCE.

#Gogs #CyberSecurity #ZeroDay #RCE #Git #OpenSource #Infosec2026 #ThreatIntel #AppSec #SysAdmin
https://t.co/PHRyqqU9Ds https://t.co/uFtXuoOtwu

0

4

0

1

364

Cybersecurity News Everyday

@TweetThreatNews

5 months ago

New Gogs zero-day lets authenticated non-admin users trigger remote code execution on exposed servers. Affects Gogs 0.14.2 and 0.15.0+dev, risking repo theft, credential exposure, and lateral movement. #Gogs #Rapid7 #RCE https://t.co/lhNA99dxKv

0

2

0

161

Daily CyberSecurity @Daily_CyberSec

7 months ago

A critical 9.3 CVSS flaw (CVE-2026-25921) in Gogs' LFS handling allows attackers to silently overwrite repository files, risking severe supply-chain attacks. #Gogs #CVE #CyberSecurity #SupplyChainAttack #LFS #Vulnerability #InfoSec #AppSec #DevSecOps https://t.co/2Y881C7wpO

Daily_CyberSec's tweet photo. A critical 9.3 CVSS flaw (CVE-2026-25921) in Gogs' LFS handling allows attackers to silently overwrite repository files, risking severe supply-chain attacks.

#Gogs #CVE #CyberSecurity #SupplyChainAttack #LFS #Vulnerability #InfoSec #AppSec #DevSecOps
https://t.co/2Y881C7wpO https://t.co/zHLKOriEQb

0

6

1

421

Gogs @GogsHQ

8 months ago

🥳 #Gogs 0.14.2 has just been released! Including security patches. Read more at https://t.co/sHFwSKSdVj

0

1

0

217

Gogs @GogsHQ

9 months ago

🥳 #Gogs 0.13.4 has just been released! Including security patches. Read more at https://t.co/SvWL0ti9Vd

0

5

0

1

257

Mr.Rabbit

@01ra66it

9 months ago

CISAがGogsの致命的脆弱性CVE-2025-8110をMust Patch指定。既に実悪用中で、Gitサーバ侵害からコード改ざんやCI/CD侵入が可能。GogsはTier0資産。即アップデートか外部遮断必須。#CVE20258110 #Gogs #SupplyChain https://t.co/gnGbxormcQ

0

2

0

448

IT-ADMlNISTRATOR

@ita_blog

10 months ago

Zero-Day-Angriffe auf den #Git-Dienst #Gogs 🚨 Eine Symlink-#Schwachstelle erlaubt Remote Code Execution trotz früherer Fixes. Über 700 öffentlich erreichbare Instanzen sollen bereits kompromittiert sein. Betreiber sollten dringend handeln: https://t.co/Dc5W9Zi7P7