29 matches found
Ghost-5.58-Arbitrary-File-Read-CVE-2023-40028
Ghost Arbitrary File Read Exploit CVE-2023-40028 Overview This script exploits a vulnerability in Ghost CMS CVE-2023-40028 to read arbitrary files from the server. By leveraging a symlink in an uploaded ZIP file, an attacker can gain unauthorized access to sensitive files on the system. Features ...
ROOT-OS-DEBIAN-13-CVE-2025-40028 CVE-2025-40028 in linux - Patched by Root
Root has patched CVE-2025-40028 in the linux package for Root:Debian:13. Multiple fixed versions available...
CVE-2023-40028
CVE-2023-40028: Ghost arbitrary file read Proof of concept for CVE-2023-40028, an authenticated arbitrary file-read vulnerability in Ghost's content import feature. A crafted ZIP archive creates a symlink under content/images, allowing the script to request a file from the Ghost host. Ghost...
CVE-2023-40028
Ghost is an open source content management system. Versions prior to 5.59.1 are subject to a vulnerability which allows authenticated users to upload files that are symlinks. This can be exploited to perform an arbitrary file read of any file on the host operating system. Site administrators can...
Ubuntu: Security Advisory (USN-7906-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
BELL-CVE-2025-40028
Bulletin has no description...
SUSE CVE-2025-40028
In the Linux kernel, the following vulnerability has been resolved: binder: fix double-free in dbitmap A process might fail to allocate a new bitmap when trying to expand its proc-dmap. In that case, dbitmapgrow fails and frees the old bitmap via dbitmapfree. However, the driver calls dbitmapfree...
CVE-2025-40028
creationtimestamp| type| source ---|---|--- 2025-10-28 11:09:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4asattfxv26...
DEBIAN-CVE-2025-40028
In the Linux kernel, the following vulnerability has been resolved: binder: fix double-free in dbitmap A process might fail to allocate a new bitmap when trying to expand its proc-dmap. In that case, dbitmapgrow fails and frees the old bitmap via dbitmapfree. However, the driver calls dbitmapfree...
CVE-2025-40028
The CVE-2025-40028 entry describes a Linux kernel vulnerability in the Binder subsystem related to dbitmap_management. When expanding proc->dmap, dbitmap_grow() may fail and free the old bitmap via dbitmap_free(), but the driver later frees the same bitmap again on process termination, causing...
CVE-2025-40028
In the Linux kernel, the following vulnerability has been resolved: binder: fix double-free in dbitmap A process might fail to allocate a new bitmap when trying to expand its proc-dmap. In that case, dbitmapgrow fails and frees the old bitmap via dbitmapfree. However, the driver calls dbitmapfree...
Linux Distros Unpatched Vulnerability : CVE-2025-40028
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - binder: fix double-free in dbitmap A process might fail to allocate a new bitmap when trying to expand its proc-dmap. In that case, dbitmapgrow fails and frees...
MAL-2025-40028 Malicious code in xyatwbkqghlznemj (npm)
The package xyatwbkqghlznemj was found to contain malicious code...
CVE-2022-40028
SourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component newProjectValidation.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fullName parameter...
Exploit for Path Traversal in Ghost
CVE-2023-40028 POC for CVE-2023-40028: Ghost CMS Arbitrary Fil...
CVE-2023-40028
creationtimestamp| type| source ---|---|--- 2025-03-07 10:00:06+00:00| published-proof-of-concept| Telegram/DSUpJzd535KWvozjCvixS0aCLxmEfW4QzhCQOssRq3Zo9k 2025-04-12 15:00:15+00:00| seen| https://bsky.app/profile/0xdf.bsky.social/post/3lmmsdrpgls2z 2025-04-14 23:00:06+00:00|...
Exploit for Path Traversal in Ghost
CVE-2023-40028: Ghost CMS Symlink Exploitation PoC Overv...
Ghost CMS 5.59.1 Arbitrary File Read
Ghost CMS version 5.59.1 proof of concept arbitrary file reading exploit. ============================================================================================================================================= | Title : Ghost CMS v 5.59.1 PHP Code Injection Vulnerability | | Author :...