Files
PoC-in-GitHub/2026/CVE-2026-59774.json

114 lines
3.9 KiB
JSON

[
{
"id": 1324786027,
"name": "CVE-2026-59774_docker",
"full_name": "FlowerWitch\/CVE-2026-59774_docker",
"owner": {
"login": "FlowerWitch",
"id": 19641363,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/19641363?v=4",
"html_url": "https:\/\/github.com\/FlowerWitch",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/FlowerWitch\/CVE-2026-59774_docker",
"description": "CVE-2026-59774",
"fork": false,
"created_at": "2026-08-06T05:43:33Z",
"updated_at": "2026-08-14T11:43:23Z",
"pushed_at": "2026-08-08T07:29:19Z",
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 5,
"score": 0,
"subscribers_count": 0
},
{
"id": 1427694442,
"name": "CVE-2026-59774-poc",
"full_name": "asvorg\/CVE-2026-59774-poc",
"owner": {
"login": "asvorg",
"id": 22218356,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/22218356?v=4",
"html_url": "https:\/\/github.com\/asvorg",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/asvorg\/CVE-2026-59774-poc",
"description": "PoC for Gitea versions before 1.27.1 is vulnerable to Path Traversal (CWE-22), which leads to unauthenticated arbitrary file read \/ information disclosure leading to RCE CVSS 9.8",
"fork": false,
"created_at": "2026-10-21T00:13:02Z",
"updated_at": "2026-10-23T13:18:13Z",
"pushed_at": "2026-10-23T13:18:10Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"cve-2026-59774",
"cves",
"cvss-critical",
"cwe-22",
"file-read-vulnerability",
"gitea",
"path-traversal",
"poc",
"rce"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1431976026,
"name": "CVE-2026-59774",
"full_name": "Ly0kha\/CVE-2026-59774",
"owner": {
"login": "Ly0kha",
"id": 8098943,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8098943?v=4",
"html_url": "https:\/\/github.com\/Ly0kha",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Ly0kha\/CVE-2026-59774",
"description": "Gitea LFI to RCE exploit (CVE-2026-59774) — arbitrary file read via Org-mode #+INCLUDE, chained to remote code execution through git hook injection",
"fork": false,
"created_at": "2026-10-24T08:30:16Z",
"updated_at": "2026-10-24T20:00:26Z",
"pushed_at": "2026-10-24T19:06:18Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2026-59774"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]