29 matches found
CVE-2023-40028
CVE-2023-40028: Ghost CMS Beliebiger Datei-Lesezugriff Beschreibung Dieser Proof-of-Concept POC kann verwendet werden, um CVE-2023-40028 auszunutzen und Datei-Lesezugriff in Ghost CMS zu erlangen. Ghost ist ein Open-Source-Content-Management-System CMS. Versionen vor 5.59.1 sind anfällig für eine...
Ghost-5.58-Arbitrary-File-Read-CVE-2023-40028
Exploit di Lettura Arbitraria di File Ghost CVE-2023-40028 Panoramica Questo script sfrutta una vulnerabilità in Ghost CMS CVE-2023-40028 per leggere file arbitrari dal server. Sfruttando un collegamento simbolico symlink in un file ZIP caricato, un utente malintenzionato può ottenere accesso non...
ROOT-OS-DEBIAN-13-CVE-2025-40028 CVE-2025-40028 in linux - Patched by Root
Root has patched CVE-2025-40028 in the linux package for Root:Debian:13. Multiple fixed versions available...
CVE-2023-40028
Ghost is an open source content management system. Versions prior to 5.59.1 are subject to a vulnerability which allows authenticated users to upload files that are symlinks. This can be exploited to perform an arbitrary file read of any file on the host operating system. Site administrators can...
Ubuntu: Security Advisory (USN-7906-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
BELL-CVE-2025-40028
Bulletin has no description...
SUSE CVE-2025-40028
In the Linux kernel, the following vulnerability has been resolved: binder: fix double-free in dbitmap A process might fail to allocate a new bitmap when trying to expand its proc-dmap. In that case, dbitmapgrow fails and frees the old bitmap via dbitmapfree. However, the driver calls dbitmapfree...
CVE-2025-40028
creationtimestamp| type| source ---|---|--- 2025-10-28 11:09:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4asattfxv26...
DEBIAN-CVE-2025-40028
In the Linux kernel, the following vulnerability has been resolved: binder: fix double-free in dbitmap A process might fail to allocate a new bitmap when trying to expand its proc-dmap. In that case, dbitmapgrow fails and frees the old bitmap via dbitmapfree. However, the driver calls dbitmapfree...
CVE-2025-40028
The CVE-2025-40028 entry describes a Linux kernel vulnerability in the Binder subsystem related to dbitmap_management. When expanding proc->dmap, dbitmap_grow() may fail and free the old bitmap via dbitmap_free(), but the driver later frees the same bitmap again on process termination, causing...
CVE-2025-40028
In the Linux kernel, the following vulnerability has been resolved: binder: fix double-free in dbitmap A process might fail to allocate a new bitmap when trying to expand its proc-dmap. In that case, dbitmapgrow fails and frees the old bitmap via dbitmapfree. However, the driver calls dbitmapfree...
Linux Distros Unpatched Vulnerability : CVE-2025-40028
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - binder: fix double-free in dbitmap A process might fail to allocate a new bitmap when trying to expand its proc-dmap. In that case, dbitmapgrow fails and frees...
MAL-2025-40028 Malicious code in xyatwbkqghlznemj (npm)
The package xyatwbkqghlznemj was found to contain malicious code...
CVE-2022-40028
SourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component newProjectValidation.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fullName parameter...
Exploit for Path Traversal in Ghost
CVE-2023-40028 POC for CVE-2023-40028: Ghost CMS Arbitrary Fil...
CVE-2023-40028
creationtimestamp| type| source ---|---|--- 2025-03-07 10:00:06+00:00| published-proof-of-concept| Telegram/DSUpJzd535KWvozjCvixS0aCLxmEfW4QzhCQOssRq3Zo9k 2025-04-12 15:00:15+00:00| seen| https://bsky.app/profile/0xdf.bsky.social/post/3lmmsdrpgls2z 2025-04-14 23:00:06+00:00|...
Exploit for Path Traversal in Ghost
CVE-2023-40028: Ghost CMS Symlink Exploitation PoC Overv...
Ghost CMS 5.59.1 Arbitrary File Read
Ghost CMS version 5.59.1 proof of concept arbitrary file reading exploit. ============================================================================================================================================= | Title : Ghost CMS v 5.59.1 PHP Code Injection Vulnerability | | Author :...