Today we are going to search for some vulnerabilitis in the code responsible for XML parsing.

Today we are going to talk about Ruby language. We'll take a look at a simple implementation of the proxy server.

Today's example consists of 2 lines of python code, because usually it's enough to introduce a vulnerability to our application.

This vulnerability allows a normal user to modify the permissions of repositories that he normally shouldn’t have access to.

This is part 1 of 3 about bugs inside Gitea

How to create a Metasploit module in example?

GitBucket Unauthenticated Remote Code Execution working when server is installed on Windows and authenticated arbitrary file read working on every platform

I create this simple cheat sheet because of GitList 0.6 Unauthenticated RCE so you can easily understand how it works.