CVE-2026-105675

The Ghost Node.js content management system is affected by a vulnerability where staff users with permissions to view staff invites can discover secret tokens for pending invites. This flaw exists in versions 4.39.0 through 6.64.0 . An attacker could exploit this to escalate privileges by accepti...

CVE-2026-105652 Ghost: Password Hash Ordering Disclosure in Ghost Admin API

Ghost is a Node.js content management system. From 0.7.2 until 6.64.0, any staff-level user was able to determine the relative ordering of other staff users' hashed passwords. This does not directly disclose password hashes, and does not provide a practical path to recovering a password. This iss...

CVE-2022-24112_POC

POC Colección de POC CVE-2022-24112 Para el entorno del campo de tiro 春秋云境:CVE-2022-24112, modifiqué dos POC, adaptando ligeramente los POC de los maestros M4xSec y twseptian para el campo de tiro 春秋云境: 春秋云境:CVE-2022-24112： Apache APISIX es un servicio de puerta de enlace de API de microservicios...

Apache-APISIX-CVE-2022-24112

Exploit de Ejecución Remota de Código en Apache APISIX CVE-2022-24112 Resumen Un atacante puede abusar del plugin batch-requests para enviar solicitudes y eludir la restricción de IP de la Admin API. Una configuración predeterminada de Apache APISIX con la clave de API predeterminada es vulnerabl...

CVE-2025-28062

CVE-2025-28062 — Vulnerabilidad CSRF que permite la toma de control de cuentas en ERPNext 14.82.1 , 14.74.3 📌 Resumen Se descubrió una vulnerabilidad de Cross-Site Request Forgery CSRF en ERPNext 14.82.1 y 14.74.3 , que permite a atacantes realizar acciones no autorizadas como: Enumeración de...

CVE-2021-45232-RCE

CVE-2021-45232 CVE-2021-45232 Apache apisix Dashboard API RCE sin autenticación Versión: 2.10.1 Fofa: title="Apache APISIX Dashboard" POC: IP:PORT/apisix/admin/migrate/export...

Ghost-CMS-Code-Injection-Audit-CVE-2026-26980

Ghost CMS Code Injection Cleaner Removes injected code from every post and page on a Ghost CMS website via the Admin API. Use this to clean up a compromised Ghost site — for example, one affected by the code injection vulnerability CVE-2026-26980 — by stripping attacker-supplied tags and other...

CVE-2022-24112

Apache APISIX 2.12.x Ejecución Remota de Código RCE Exploit Este script en Python es una Prueba de Concepto PoC para una vulnerabilidad de ejecución remota de código RCE en Apache APISIX versiones 2.12.0 y 2.12.1. La vulnerabilidad radica en el mal uso del campo Lua filterfunc dentro de la API de...

Kong Admin <=2.03 - Admin API Access

Kong Admin through 2.0.3 contains an issue via docker-kong which makes the admin API port accessible on interfaces other than 127.0.0.1. id: CVE-2020-11710 info: name: Kong Admin =2.03 - Admin API Access author: pikpikcu severity: critical description: Kong Admin through 2.0.3 contains an issue v...

CVE-2026-104415

Ghost from 0.7.2 before 6.64.0 contains an information disclosure vulnerability in the Admin API that allows staff-level users to determine the relative ordering of other staff users' password hashes. Authenticated staff users can query the Admin API to infer hash ordering, though this does not...

CVE-2026-104416

Ghost from 4.39.0 before 6.64.0 contains an information disclosure vulnerability in the Admin API that allows staff users to view secret tokens of pending staff invites. Staff users with invite viewing permission can accept pending invites for higher-privileged roles to escalate their privileges...

CVE-2026-104416 Ghost 4.39.0 before 6.64.0 Invite Token Disclosure via Admin API

Ghost from 4.39.0 before 6.64.0 contains an information disclosure vulnerability in the Admin API that allows staff users to view secret tokens of pending staff invites. Staff users with invite viewing permission can accept pending invites for higher-privileged roles to escalate their privileges...

CVE-2026-104416

Ghost versions 4.39.0 through 6.64.0 are vulnerable to an information disclosure vulnerability within the Admin API . This flaw allows staff users with invite viewing permissions to access secret tokens for pending staff invites. By obtaining these tokens, an attacker can accept invites for highe...

EUVD-2026-91427

Ghost from 4.39.0 before 6.64.0 contains an information disclosure vulnerability in the Admin API that allows staff users to view secret tokens of pending staff invites. Staff users with invite viewing permission can accept pending invites for higher-privileged roles to escalate their privileges...

CVE-2026-104415

The Ghost platform (versions 0.7.2 before 6.64.0 ) contains an information disclosure vulnerability within the Admin API . Authenticated users with staff-level privileges can query the Admin API to determine the relative ordering of password hashes belonging to other staff users. While this allow...

EUVD-2026-91426

Ghost from 0.7.2 before 6.64.0 contains an information disclosure vulnerability in the Admin API that allows staff-level users to determine the relative ordering of other staff users' password hashes. Authenticated staff users can query the Admin API to infer hash ordering, though this does not...

CVE-2026-104415 Ghost 0.7.2 before 6.64.0 Password Hash Ordering Disclosure via Admin API

Ghost from 0.7.2 before 6.64.0 contains an information disclosure vulnerability in the Admin API that allows staff-level users to determine the relative ordering of other staff users' password hashes. Authenticated staff users can query the Admin API to infer hash ordering, though this does not...

CVE-2026-104415 Ghost 0.7.2 before 6.64.0 Password Hash Ordering Disclosure via Admin API

Ghost from 0.7.2 before 6.64.0 contains an information disclosure vulnerability in the Admin API that allows staff-level users to determine the relative ordering of other staff users' password hashes. Authenticated staff users can query the Admin API to infer hash ordering, though this does not...

kong-pwn

kong-pwn Usa KongAPI expuesto para actuar como un proxy y obtener URLs de metadatos o URLs internas. CVE-2020-11710 - No es una vulnerabilidad, es una mala configuración. Cómo usar usage: kong-pwn.py -h -u URL -s SSRF -p PROXY kong-pwn.py: error: the following arguments are required: -u/--url,...

toxy

toxy Not actively maintained, may not work with latest node.js runtimes. If you are interested in maintaining toxy, please open an issue. Hackable HTTP proxy to simulate server failure scenarios , systems resiliency testing and unexpected network conditions , built for node.js. It was mainly...