
Detects and exploits a critical pre-auth remote code execution vulnerability in Gitea via the diffpatch endpoint, with a non-intrusive detector and exploit script.
CVE-2026-60004 is a critical vulnerability (CVSS 9.8) in Gitea that allows unauthenticated remote code execution via the /api/v1/repos/{owner}/{repo}/diffpatch endpoint.
detector.py)Detects whether a Gitea server is vulnerable without exploiting it.
python3 detector.py --url http://target:3000
python3 detector.py --url http://target:3000 --json