CVE-2026-60004 is a remote code execution vulnerability patched by Gitea developers in late July with the release of version 1.27.1.
The post CISA Warns of Exploited Gitea Vulnerability appeared first on SecurityWeek.
Making a cup of black tea is not rocket science, but I am sharing few of my tips and tricks to make the perfect cup of black tea so it is not bitter. Enjoy this hot cup of tea with black tea with biscuits or cookies. Black Tea Recipe Making black tea is not rocket...
The post Black Tea Recipe appeared first on Yummy Tummy.
Just wrapped up another Hack The Box machine: Fries (Hard).
TThis machine provided a realistic attack path that started with source code review in Gitea, where leaked credentials in a Git commit led to authenticated PostgreSQL RCE through pgAdmin. From there, I pivoted through the internal Docker network using Ligolo-ng, abused an exposed NFS share and debugfs to gain host access, then exploited PWM configuration weaknesses to capture LDAP credentials. The final stage involved Active Directory enumeration and AD CS (ESC6/ESC7) abuse to obtain an administrator certificate and compromise the domain. A great lab for practising web exploitation, Docker security, Linux privilege escalation, internal pivoting, and Active Directory attacks.
#HackTheBox #HTB #CyberSecurity #PenetrationTesting #RedTeam #ActiveDirectory #ADCS #Docker #Ligolo #PostgreSQL #Gitea #EthicalHacking #Writeup #CTF …
Learn MoreHack The Box: Fries Machine Walkthrough – Hard Difficulty
The post Hack The Box: Fries Machine Walkthrough – Hard Difficulty appeared first on Threatninja.net.
Thai Iced Milk Tea, also known as Cha Yen is a sweet, vibrant tea made with Thai tea mix, sugar,sweetened condensed milk and evaporated milk. Strong tea is brewed using special Thai tea leaves and poured over ice. The Tea has a unique bright orange colour to it which comes from the special Thai tea...
The post Thai Iced Tea Recipe (Cha Yen Recipe) appeared first on Yummy Tummy.
A critical flaw in Gitea's official Docker image let anyone impersonate an admin with one forged header. Sysdig spotted the first exploitation attempts 13 days after the fix shipped.
Gitea Docker Vulnerability Now Under Active Probing, CVE-2026-20896 on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses.
Login