No fix yet for critical RCE bug in open-source Git service Gogs - exploit module is out

A critical, remote code execution (RCE) bug in Gogs, a popular open-source self-hosted Git service, can be exploited by any authenticated user - no special privileges required - on a default ...
The Hacker News

Critical Gogs RCE Vulnerability Lets Any Authenticated User Execute Arbitrary Code

A critical security vulnerability has been disclosed in Gogs, a popular open-source self-hosted Git service, that allows an ...

Root Evidence Research Finds Only 1.4% of Vulnerabilities Are Known to Be Exploited in Real-World Attacks

Root Evidence, the cybersecurity startup championing evidence-based security, today released new research showing that the ...
SecurityWeek

Gogs Zero-Day Exposes Servers to Remote Code Execution

Open source Git service Gogs is affected by a critical-severity zero-day vulnerability that exposes servers to remote code execution.

Squid and Safe Labs say third-party module behind $3.2M exploit

A suspected third-party Safe module exploit has drained about $3.2 million from wallets across Ethereum and Base, with ...
Crowdfund Insider

DeFi Security Breach : Module Linked to Gnosis Safe Wallets Exploited, Resulting in $3.2 Million Loss

A vulnerability in an external module associated with Gnosis Safe (rebranded as Safe) multi-signature wallets enabled an ...
Cryptopolitan on MSN

Gnosis Safe users lose $3.2M in Base and Ethereum exploit

$3.2M drained from 86 Gnosis Safes on Base and Ethereum in under 2 hours via a vulnerable third-party SquidRouterModule ...
https//beincrypto.com

Squid Distances Itself From $3.2 Million Hack of Lookalike Third-Party Contract

Attackers exploited a third-party SquidRouterModule to drain $3.2M from 86 Gnosis Safes. Stolen tokens were swapped into 3 million DAI via attacker-controlled Uniswap V3 pools. Squid says the contract ...