EUVD-2026-92791

Camunda 7.24.0 before 7.24.15 contains an incorrect authorization vulnerability in the Admin web application's first-run setup endpoint, where SetupResource incorrectly determines setup availability by counting only direct members of the camunda-admin group rather than recognizing all configured...

CVE-2026-105679

Ghost is a Node.js content management system. From 6.22.1 until 6.64.0, Ghost restricted the content type used to serve uploaded files to prevent browsers from executing them. On sites using the default local storage adapter, this restriction was not applied, so files uploaded by any staff user...

CVE-2026-105687 Penpot: A team admin (non-owner) can remove the team owner via ::delete-team-member — missing owner-protection

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the delete-team-member RPC allows a team administrator to remove any member other than themselves but does not protect the team owner. A non-owner administrator can delete the owner's team-profile-rel membership and lock t...

CVE-2023-37755---Hardcoded-Admin-Credential-in-i-doit-Pro-25-and-below

CVE-2023-37755 - i-doit Pro 25 이하 버전의 하드코딩된 관리자 자격 증명 i-doit Pro 25 이하 버전은 하드코딩된 관리자 자격 증명 취약점에 노출됩니다. 이 취약점으로 인해 누구나 사용자 이름 “admin”과 비밀번호 “admin”만으로 관리자로 로그인할 수 있습니다. 제품 설명: i-doit은 synetics GmbH가 개발한 웹 기반 오픈소스 IT 문서화 및 CMDBConfiguration Management Database입니다. i-doit Pro는 이 소프트웨어의 상용 버전으로 유료...

CVE-2025-34077

CVE-2025-34077 인증되지 않은 관리자 세션 하이재킹 - Pie Register 플러그인 ≤ 3.7.1.4 📌 설명 이 익스플로잇은 Pie Register WordPress 플러그인버전 ≤ 3.7.1.4의 취약점을 대상으로 하여, 인증되지 않은 관리자 계정의 세션 하이재킹 을 허용합니다. 🛡️ 이 도구는 승인된 테스트 및 연구용으로만 사용하십시오. 소유하지 않거나 명시적 테스트 허가를 받지 않은 시스템에서는 사용하지 마십시오. 🧪 개념 증명 🚀 사용법 python3 CVE-2025-34077.py...

CVE-2026-105679

The Ghost Node.js content management system is vulnerable to Stored XSS in versions 6.22.1 through 6.64.0 . The root cause is that the restriction on content types for uploaded files is not applied when using the default local storage adapter , allowing files to be served with content types deriv...

CVE-2026-105644

Ghost is a Node.js content management system. From 4.0.0 until 6.67.0, SVG images included in content imports were stored without sanitization. An attacker who convinced an Administrator to import a crafted file could host scripts on the site's domain, possibly resulting in compromise of staff...

CVE-2026-105643

Ghost is a Node.js content management system. From version 6.34.0 until 6.67.0, embed cards in the Ghost editor could bypass protections against stored cross-site scripting. Any staff user, including Contributors, could store scripts in post content that ran when another staff user opened the pos...

CVE-2026-105675 Ghost: Invite Token Disclosure in Ghost Admin API

Ghost is a Node.js content management system. From 4.39.0 until 6.64.0, staff users with permission to view staff invites were able to discover the secret token of pending invites, including invites for roles with higher privileges than their own. This could allow a staff user to escalate their...

CVE-2026-105675 Ghost: Invite Token Disclosure in Ghost Admin API

Ghost is a Node.js content management system. From 4.39.0 until 6.64.0, staff users with permission to view staff invites were able to discover the secret token of pending invites, including invites for roles with higher privileges than their own. This could allow a staff user to escalate their...

CVE-2026-105675 Ghost: Invite Token Disclosure in Ghost Admin API

Ghost is a Node.js content management system. From 4.39.0 until 6.64.0, staff users with permission to view staff invites were able to discover the secret token of pending invites, including invites for roles with higher privileges than their own. This could allow a staff user to escalate their...

CVE-2026-105675

The Ghost Node.js content management system is affected by a vulnerability where staff users with permissions to view staff invites can discover secret tokens for pending invites. This flaw exists in versions 4.39.0 through 6.64.0 . An attacker could exploit this to escalate privileges by accepti...

CVE-2026-105652 Ghost: Password Hash Ordering Disclosure in Ghost Admin API

Ghost is a Node.js content management system. From 0.7.2 until 6.64.0, any staff-level user was able to determine the relative ordering of other staff users' hashed passwords. This does not directly disclose password hashes, and does not provide a practical path to recovering a password. This iss...

CVE-2026-105652 Ghost: Password Hash Ordering Disclosure in Ghost Admin API

Ghost is a Node.js content management system. From 0.7.2 until 6.64.0, any staff-level user was able to determine the relative ordering of other staff users' hashed passwords. This does not directly disclose password hashes, and does not provide a practical path to recovering a password. This iss...

CVE-2026-105652 Ghost: Password Hash Ordering Disclosure in Ghost Admin API

Ghost is a Node.js content management system. From 0.7.2 until 6.64.0, any staff-level user was able to determine the relative ordering of other staff users' hashed passwords. This does not directly disclose password hashes, and does not provide a practical path to recovering a password. This iss...

noPac

소개 NoPac 익스플로잇은 CVE-2021-42278 및 CVE-2021-42287과 같은 오래된 취약점을 악용하여 일반 사용자로부터 도메인 관리자를 가장합니다. 더 이상 귀찮은 의존성은 없습니다. 단일 바이너리일 뿐입니다. 세상에, 저는 Go를 사랑합니다. Python은 절대 못 따라옵니다. -shell 플래그는 impacket-smbexec를 실행합니다. 가장된 계정의 ccache 파일을 그냥 사용할 수도 있습니다. 주로 Impacket의 새로운 Go 구현gopacket을 테스트하기 위해 만들었고, 솔직히 꽤 멋집니다...

CVE-2026-105650 Ghost: Stored XSS via oEmbed Photo Responses

Ghost is a Node.js content management system. From 2.1.0 until 6.64.0, embedding a URL from an attacker-controlled website could result in untrusted scripts being stored in post content. These scripts could run in the Ghost editor, on the published site, and in newsletter emails, possibly resulti...

CVE-2026-105650 Ghost: Stored XSS via oEmbed Photo Responses

Ghost is a Node.js content management system. From 2.1.0 until 6.64.0, embedding a URL from an attacker-controlled website could result in untrusted scripts being stored in post content. These scripts could run in the Ghost editor, on the published site, and in newsletter emails, possibly resulti...

CVE-2026-105650

The Ghost Node.js content management system (versions 2.1.0 through 6.64.0 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The flaw exists because embedding a URL from an attacker-controlled website can cause untrusted scripts to be stored within post content. These scripts can execute in ...

CVE-2026-105650 Ghost: Stored XSS via oEmbed Photo Responses

Ghost is a Node.js content management system. From 2.1.0 until 6.64.0, embedding a URL from an attacker-controlled website could result in untrusted scripts being stored in post content. These scripts could run in the Ghost editor, on the published site, and in newsletter emails, possibly resulti...