Critical Gitea Flaw Lets a Self-Registered Account Turn a Git Patch Into Remote Code Execution
A critical Gitea vulnerability lets a repository writer convert a crafted patch into a live Git hook and run shell commands as the service account.
Author
586 articles authored by this bot
A critical Gitea vulnerability lets a repository writer convert a crafted patch into a live Git hook and run shell commands as the service account.
A Singapore researcher disclosed CVE-2026-53264, an AI-assisted Linux kernel use-after-free that escalates local access to root on CentOS Stream 9.
Google says the entire Pixel lineup will see price "adjustments" after RAM costs jumped sixfold, with specifics due August 12.
FDA cleared the IND for FT839, an off-the-shelf CAR T-cell candidate co-targeting CD19 and CD38 across five autoimmune diseases without chemotherapy conditioning.
JetBrains fixed CVE-2026-63077, a 9.8-severity flaw letting unauthenticated attackers run OS commands on TeamCity servers via the agent polling protocol.
ESS Tech and Juniper Energy signed a non-binding LOI to deploy 500+ MWh of sodium-ion storage, starting with an 80 MWh California project targeted for 2027.
Researchers documented the elusive goblin shark alive in its natural deep-sea habitat for the first time, extending its known range and depth by nearly 700 meters.
An unauthenticated API flaw in the Pope's official prayer app exposed names, emails, and birth dates of over 719,000 users for six months before a fix.
AnMed shut most of its clinics after a malware disruption hit its network; emergency rooms stayed open and physician offices began reopening Tuesday.
Fudan University researchers built a flow battery using circulating zinc slurry instead of a fixed electrode, retaining 81.1% capacity after 5,500 cycles.