ghost-checker

ghost-checker Test wether you're exposed to ghost CVE-2015-0235. All kudos go to Qualys Security Usage root@kitploit: /tmp/ghost-checker master$ make cc -o ghost ghost.c /tmp/ghost-checker master$ ./ghost not vulnerable /tmp/ghost-checker master$ make clean rm ghost Credits Qualys Security Team...

CVE-2020-0796

Vulnerabilidad SMBv3 Ghost CVE-2020-0796 Demo : exploit-demo.mp4...

ghosttester

Script de prueba para la vulnerabilidad GHOST de Glibc CVE-2015-0235 Un pequeño script que encontré para probar la vulnerabilidad GHOST de Glibc CVE-2015-0235. El uso es bastante simple. Solo clona o descarga el script en tu servidor/escritorio y ejecútalo de la siguiente manera: Debian/Ubuntu...

cfengine-CVE_2015_0235

CVE20150235 Exploit de desbordamiento de búfer en gethostbyname de glibc - CVE-2015-0235 https://community.qualys.com/blogs/laws-of-vulnerabilities/2015/01/27/the-ghost-vulnerability Obtenido originalmente del mensaje de Ben Bomgardner a la lista de correo help-cfengine...

CVE-2015-0235-workaround

CVE-2015-0235-solución temporal también conocida como vulnerabilidad GHOST en glibc Un envoltorio de biblioteca compartida con comprobaciones adicionales para las funciones vulnerables gethostbyname2r y gethostbynamer . La solución adecuada para CVE-2015-0235 es actualizar glibc al menos a...

NPM: Ghost: Cross-Site Scripting in Feature Image Captions

NPM: Ghost: Cross-Site Scripting in Feature Image Captions vulnerability discovered by ? in WordPress Npm ghost versions = 4.9.0, 6.54.1...

GHSA-PR22-P9RP-2CQV Ghost: Cross-Site Scripting in Feature Image Captions

Impact An input validation issue allowed any staff user to create a post with content that could be used to hijack another staff user's Ghost Admin session resulting in privilege escalation. Vulnerable versions This vulnerability is present in Ghost from v4.9.0 up to v6.54.0. Patches v6.54.1...

CVE-2026-70596

Ghost (Node.js CMS) is affected from versions 4.9.0 through 6.54.1 by an input validation issue in feature_image_caption that could be exploited by a staff user to hijack another staff user’s Ghost Admin session, enabling privilege escalation. The issue is fixed in 6.54.1. The provided metrics in...

GHSA-X5MM-WM4G-J5XV Ghost: Server-Side Request Forgery Mitigation Issue

Impact A validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user to make limited HTTP requests to hosts in the Ghost server's internal network. A successful attack would not result in any response data being returned. Vulnerable versions This...

Ghost: Server-Side Request Forgery Mitigation Issue

Impact A validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user to make limited HTTP requests to hosts in the Ghost server's internal network. A successful attack would not result in any response data being returned. Vulnerable versions This...

Ghost: Database Backup Path Traversal

Impact An Administrator-level user could remotely overwrite certain files on the filesystem leading to integrity and availability issues. Vulnerable versions This vulnerability is present in Ghost from 1.20.1 up to v6.54.0. Patches v6.54.1 contains a fix for this issue. How to update For...

GHSA-CJ62-HVV2-2Q5H Ghost: Database Backup Path Traversal

Impact An Administrator-level user could remotely overwrite certain files on the filesystem leading to integrity and availability issues. Vulnerable versions This vulnerability is present in Ghost from 1.20.1 up to v6.54.0. Patches v6.54.1 contains a fix for this issue. How to update For...

GHSA-JM22-3W23-5Q7W Ghost: Blind Password Hash Disclosure in Ghost Admin API

Impact Any staff-level user was able to leak the hashed passwords of other staff users. An offline password-guessing attack against the hashes could lead to account takeover if successful, but Device Verification should have prevented an attacker from logging in with a recovered password. Dependi...

NPM: Ghost: Archived Offers can be Redeemed

NPM: Ghost: Archived Offers can be Redeemed vulnerability discovered by ? in WordPress Npm ghost versions = 4.22.0, 6.54.1...

GHSA-4WX2-7GVJ-QFQ3 Ghost: Archived Offers can be Redeemed

Impact A missing validation check allowed users to redeem subscription offers that were no longer active. Vulnerable versions This vulnerability is present in Ghost from v4.22.0 up to v6.54.0. Patches v6.54.1 contains a fix for this issue. How to update For self-hosters using Docker, find Docker'...

CVE-2026-53943

Ghost is a Node.js content management system. From until 6.37.0, when Ghost is behind a shared caching layer that results in cached content being shared between different visitors, an unauthenticated user could send an x-ghost-preview header that altered the rendered frontend response. In affecte...

CVE-2026-53946 Ghost: Mobiledoc image-size fetch SSRF

Ghost is a Node.js content management system. From 6.19.4 until 6.21.1, when re-rendering posts, Ghost would refetch missing image dimensions by issuing an outbound HTTP request to the URL stored on an image card — without restricting that URL to trusted image hosts. An authenticated staff user...

Ghost has incomplete CSRF protections around OTC use

Impact Incomplete CSRF protections around /session/verify made it possible to use OTCs in login sessions different from the requesting session. In some scenarios this might have made it easier for phishers to take over a Ghost site. Vulnerable versions This vulnerability is present in Ghost from...

GHSA-CGC2-RCRH-QR5X Ghost Vulnerable to Remote Code Execution via Malicious Themes

Impact Specifically crafted malicious themes can execute arbitrary code on the server running Ghost. Vulnerable Versions This vulnerability is present in Ghost v0.7.2 to v6.19.0. Patches v6.19.1 contains a fix for this issue. Workarounds Ghost generally recommends users refrain from installing...

Ghost Vulnerable to Remote Code Execution via Malicious Themes

Impact Specifically crafted malicious themes can execute arbitrary code on the server running Ghost. Vulnerable Versions This vulnerability is present in Ghost v0.7.2 to v6.19.0. Patches v6.19.1 contains a fix for this issue. Workarounds Ghost generally recommends users refrain from installing...