Over 8,300 Gitea servers vulnerable to code execution attacks
Teaser from the source
Over 8,300 Internet-exposed Gitea instances are still unpatched against a critical security flaw exploited in ongoing remote code execution attacks, according to cybersecurity watchdog Shadowserver. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on execution
Other advisories
- MediumCVE-2026-119193PHPUnit vulnerable to code execution by other local users via shared temporary directory in PHPT code coverage handling
- MediumCVE-2026-119193PHPUnit vulnerable to code execution by other local users via shared temporary directory in PHPT code coverage handling
- Not ratedosv:GHSA-4xm8-rg9h-jhq2Signal K resources API path traversal can disclose the JWT signing secret and enable remote code execution
- Criticalghsa:GHSA-4xm8-rg9h-jhq2Signal K resources API path traversal can disclose the JWT signing secret and enable remote code execution
- Not ratedosv:GHSA-hff9-5pqw-6w9fimgproxy has integer overflow in imgproxy ICO loader that causes denial of service and may permit remote code execution
- Criticalghsa:GHSA-hff9-5pqw-6w9fimgproxy has integer overflow in imgproxy ICO loader that causes denial of service and may permit remote code execution
- Not ratedosv:CLEANSTART-2024-PA48492When processing a MAR update file, after the signature has been validated, an invalid name length could result in a heap overflow, leading to memory corruption and potentially arbitrary code execution
- Not ratedosv:CLEANSTART-2024-ZR75651During ECDSA signature generation, padding applied in the nonce designed to ensure constant-time scalar multiplication was removed, resulting in variable-time execution dependent on secret data
Other news entries
- WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 HoursNewsThe Hacker News
- Anthropic AI model finds Linux kernel bug that leads to remote root accessNewsCSO Online
- Erneut kritischer Bug in Linux TCP/IP aufgedeckt – Updates in ArbeitNewsheise Security
- Fresh WordPress Vulnerability in Attackers’ CrosshairsNewsSecurityWeek
- Adobe, Veeam, Juniper Networks Patch Critical VulnerabilitiesNewsSecurityWeek
- Trusting Unsloth’s trust setting could mean executing malicious codeNewsCSO Online
- Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security BypassNewsThe Hacker News
- Hackers Start Probing Fresh Oracle EBS VulnerabilityNewsSecurityWeek
ID