Topic: symbolic link abuse

  • Unpatched Gogs Bug Actively Exploited, CISA Warns

    Unpatched Gogs Bug Actively Exploited, CISA Warns

    A critical vulnerability (CVE-2025-8110) in the Gogs platform is being actively exploited, allowing authenticated users to achieve remote code execution by overwriting files via a symbolic link flaw. Over 700 Gogs instances have already been compromised, with no official patch yet available, thou...

    Read More »