2044 matches found
EUVD-2025-37293
Malicious code in gunpowder-ghost-curse npm...
MAL-2025-49293 Malicious code in @dvargas135/gunpowder-ghost (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 400dea6d2b5bfe1ff00f2fe709cb1ef33f393894e93bff155b32021682d1e571 The package @dvargas135/gunpowder-ghost was found to contain malicious code...
EUVD-2025-37299
Malicious code in @dvargas135/gunpowder-ghost npm...
Malicious code in @alexandrsarioglo/npm-ghost-htb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ff0b87bff66ff36f0fe152f37cd1d7a0733b0a9ff2eecbd10e0b8ccc52e4437 The package @alexandrsarioglo/npm-ghost-htb was found to contain malicious code...
Malicious code in @dvargas135/gunpowder-ghost (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 400dea6d2b5bfe1ff00f2fe709cb1ef33f393894e93bff155b32021682d1e571 The package @dvargas135/gunpowder-ghost was found to contain malicious code...
Malicious code in gunpowder-ghost-curse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c321a65829e56f1b0a19c8674e57684adb978f6689b380037c41189d68cbfe2 The package gunpowder-ghost-curse was found to contain malicious code...
EUVD-2025-37300
Malicious code in @alexandrsarioglo/npm-ghost-htb npm...
MAL-2025-49292 Malicious code in @alexandrsarioglo/npm-ghost-htb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ff0b87bff66ff36f0fe152f37cd1d7a0733b0a9ff2eecbd10e0b8ccc52e4437 The package @alexandrsarioglo/npm-ghost-htb was found to contain malicious code...
MAL-2025-49299 Malicious code in gunpowder-ghost-curse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c321a65829e56f1b0a19c8674e57684adb978f6689b380037c41189d68cbfe2 The package gunpowder-ghost-curse was found to contain malicious code...
MAL-2025-49286 Malicious code in gunpowder-ghost (npm)
Four pirate-themed npm packages blackbeards-navigator, beusy, sirens-lament, gunpowder-ghost were published by the npm account beusy with heavily inflated version numbers 209.0.0–210.0.0, a hallmark of dependency confusion attacks. Each package contains identical malicious lifecycle scripts...
MAL-2025-49278 Malicious code in @asarioglo/npm-ghost-htb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc1c8d6072a17a3bb6fd2befebfe8285665212b8e06d61773b14bacd1e01132a The package @asarioglo/npm-ghost-htb was found to contain malicious code...
Malicious code in @asarioglo/npm-ghost-htb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc1c8d6072a17a3bb6fd2befebfe8285665212b8e06d61773b14bacd1e01132a The package @asarioglo/npm-ghost-htb was found to contain malicious code...
Malicious code in gunpowder-ghost (npm)
Four pirate-themed npm packages blackbeards-navigator, beusy, sirens-lament, gunpowder-ghost were published by the npm account beusy with heavily inflated version numbers 209.0.0–210.0.0, a hallmark of dependency confusion attacks. Each package contains identical malicious lifecycle scripts...
EUVD-2025-37286
Malicious code in @asarioglo/npm-ghost-htb npm...
EUVD-2025-37278
Malicious code in gunpowder-ghost npm...
Server Side Request Forgery (SSRF)
Ghost is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to improper validation of user-supplied URLs, which allows an attacker to send crafted requests to internal resources and potentially access sensitive information...
Preparing for the Digital Battlefield of 2026: Ghost Identities, Poisoned Accounts, & AI Agent Havoc
BeyondTrust's annual cybersecurity predictions point to a year where old defenses will fail quietly, and new attack vectors will surge. Introduction The next major breach won't be a phished password. It will be the result of a massive, unmanaged identity debt. This debt takes many forms: it's the...
CVE-2025-12342 Serdar Bayram Ghost Hot Spot Login Auth.php sql injection
A flaw has been found in Serdar Bayram Ghost Hot Spot up to 20251014. The affected element is an unknown function of the file /Auth.php of the component Login. This manipulation causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used...
CVE-2025-12342 Serdar Bayram Ghost Hot Spot Login Auth.php sql injection
A flaw has been found in Serdar Bayram Ghost Hot Spot up to 20251014. The affected element is an unknown function of the file /Auth.php of the component Login. This manipulation causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used...
EUVD-2025-36389
A flaw has been found in Serdar Bayram Ghost Hot Spot up to 20251014. The affected element is an unknown function of the file /Auth.php of the component Login. This manipulation causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used...