Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Tools/GitHubGitHub/fevar54/cve-2026-60004
Vulnerability ScannersVulnerability AnalysisExploitationWeb SecurityPenetration Testing
GitHubfevar54/cve-2026-60004

cve-2026-60004

Detects and exploits a critical pre-auth remote code execution vulnerability in Gitea via the diffpatch endpoint, with a non-intrusive detector and exploit script.

View Repository
131 month agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2026-60004 — Gitea <= 1.27.0 Pre-Auth Remote Code Execution

Description

CVE-2026-60004 is a critical vulnerability (CVSS 9.8) in Gitea that allows unauthenticated remote code execution via the /api/v1/repos/{owner}/{repo}/diffpatch endpoint.

Tools

1. Detector (detector.py)

Detects whether a Gitea server is vulnerable without exploiting it.

python3 detector.py --url http://target:3000
python3 detector.py --url http://target:3000 --json
Download Tool