Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
cve-2026-60004 — Detects and exploits a critical pre-auth remote code execution vulnerability in Gitea via the diffpatch endpoint, with a non-intrusive detector and exploit script. | Kitploit
Tools/GitHubGitHub/fevar54/cve-2026-60004
Vulnerability ScannersVulnerability AnalysisExploitationWeb SecurityPenetration Testing
GitHubfevar54/cve-2026-60004

cve-2026-60004

Detects and exploits a critical pre-auth remote code execution vulnerability in Gitea via the diffpatch endpoint, with a non-intrusive detector and exploit script.

View Repository
1 day agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2026-60004 — Gitea <= 1.27.0 Pre-Auth Remote Code Execution

Description

CVE-2026-60004 is a critical vulnerability (CVSS 9.8) in Gitea that allows unauthenticated remote code execution via the /api/v1/repos/{owner}/{repo}/diffpatch endpoint.

Tools

1. Detector (detector.py)

Detects whether a Gitea server is vulnerable without exploiting it.

root@kitploit:~
python3 detector.py --url http://target:3000
python3 detector.py --url http://target:3000 --json
Download Tool