CVE-2020-0796

SMBv3 Ghost CVE-2020-0796 취약점 데모 : exploit-demo.mp4...

ghost-checker

ghost-checker ghost CVE-2015-0235에 노출되었는지 테스트합니다. 모든 공로는 Qualys Security에 있습니다. 사용법 /tmp/ghost-checker master$ make cc -o ghost ghost.c /tmp/ghost-checker master$ ./ghost not vulnerable /tmp/ghost-checker master$ make clean rm ghost 크레딧 Qualys Security Team...

ghosttester

Glibc GHOST 취약점 CVE-2015-0235 테스트 스크립트 Glibc GHOST 취약점 CVE-2015-0235를 테스트하기 위해 찾은 작은 스크립트입니다. 사용법은 매우 간단합니다. 스크립트를 서버나 데스크탑에 클론하거나 다운로드한 후 다음과 같이 실행하기만 하면 됩니다: Debian/Ubuntu gcc ghosttest.c -o ghosttest 또는: ./ghosttest.c CentOS/RHEL/Suse ./ghosttest.sh 서버나 데스크탑이 취약하다면 최대한 빨리 업데이트를 수행해야 합니다. 패치된 버...

cfengine-CVE_2015_0235

CVE20150235 glibc의 gethostbyname 버퍼 오버플로 익스플로잇 - CVE-2015-0235 https://community.qualys.com/blogs/laws-of-vulnerabilities/2015/01/27/the-ghost-vulnerability 원래 Ben Bomgardner가 help-cfengine 메일링 리스트에 게시한 글에서 가져왔습니다. https://groups.google.com/forum/!topic/help-cfengine/tWjOlO19Mrw masterfiles로의 통합...

CVE-2015-0235-workaround

CVE-2015-0235-workaround 일명 GHOST glibc 취약점 취약한 함수 gethostbyname2r 및 gethostbynamer 에 대한 추가 검사를 제공하는 공유 라이브러리 래퍼입니다. CVE-2015-0235에 대한 올바른 해결책은 glibc를 최소 glibc-2.18로 업그레이드하는 것입니다. 일부 경우, 예를 들어 맞춤형 양산 임베디드 시스템에서는 glibc의 즉시 업그레이드가 불가능합니다. 그러한 업그레이드는 전체 시스템에 대한 검증을 요구하기 때문입니다. 이러한 경우에 이 워크어라운드는 검증이 ...

NPM: Ghost: Cross-Site Scripting in Feature Image Captions

NPM: Ghost: Cross-Site Scripting in Feature Image Captions vulnerability discovered by ? in WordPress Npm ghost versions = 4.9.0, 6.54.1...

GHSA-PR22-P9RP-2CQV Ghost: Cross-Site Scripting in Feature Image Captions

Impact An input validation issue allowed any staff user to create a post with content that could be used to hijack another staff user's Ghost Admin session resulting in privilege escalation. Vulnerable versions This vulnerability is present in Ghost from v4.9.0 up to v6.54.0. Patches v6.54.1...

CVE-2026-70596

Ghost (Node.js CMS) is affected from versions 4.9.0 through 6.54.1 by an input validation issue in feature_image_caption that could be exploited by a staff user to hijack another staff user’s Ghost Admin session, enabling privilege escalation. The issue is fixed in 6.54.1. The provided metrics in...

Ghost: Server-Side Request Forgery Mitigation Issue

Impact A validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user to make limited HTTP requests to hosts in the Ghost server's internal network. A successful attack would not result in any response data being returned. Vulnerable versions This...

GHSA-X5MM-WM4G-J5XV Ghost: Server-Side Request Forgery Mitigation Issue

Impact A validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user to make limited HTTP requests to hosts in the Ghost server's internal network. A successful attack would not result in any response data being returned. Vulnerable versions This...

GHSA-XM43-3M56-W3WF Ghost: Paid gift memberships obtainable at minimal cost via the donations feature

Impact A vulnerability in Ghost's public donation checkout flow allowed an unauthenticated attacker to obtain full paid gift memberships for a minimal payment. No customer or member data was exposed, and the issue could not be used to steal money from a site or its members. Vulnerable versions Th...

Ghost: Member existence leak via magic link sign-in response

Impact A discrepancy in responses from the members signin endpoints made it possible for an unauthenticated attacker to determine whether a given email address belongs to a registered member of a Ghost site. Vulnerable versions This vulnerability is present in Ghost from v5.18.0 up to v6.21.0...

Ghost: Database Backup Path Traversal

Impact An Administrator-level user could remotely overwrite certain files on the filesystem leading to integrity and availability issues. Vulnerable versions This vulnerability is present in Ghost from 1.20.1 up to v6.54.0. Patches v6.54.1 contains a fix for this issue. How to update For...

GHSA-CJ62-HVV2-2Q5H Ghost: Database Backup Path Traversal

Impact An Administrator-level user could remotely overwrite certain files on the filesystem leading to integrity and availability issues. Vulnerable versions This vulnerability is present in Ghost from 1.20.1 up to v6.54.0. Patches v6.54.1 contains a fix for this issue. How to update For...

GHSA-JM22-3W23-5Q7W Ghost: Blind Password Hash Disclosure in Ghost Admin API

Impact Any staff-level user was able to leak the hashed passwords of other staff users. An offline password-guessing attack against the hashes could lead to account takeover if successful, but Device Verification should have prevented an attacker from logging in with a recovered password. Dependi...

Ghost: Mobiledoc image-size fetch SSRF

Impact When re-rendering posts, Ghost would refetch missing image dimensions by issuing an outbound HTTP request to the URL stored on an image card — without restricting that URL to trusted image hosts. An authenticated staff user able to create or edit posts could therefore point an image card a...

GHSA-G366-23FW-GGP6 Ghost: Mobiledoc image-size fetch SSRF

Impact When re-rendering posts, Ghost would refetch missing image dimensions by issuing an outbound HTTP request to the URL stored on an image card — without restricting that URL to trusted image hosts. An authenticated staff user able to create or edit posts could therefore point an image card a...

GHSA-CH52-PX8Q-F22J Ghost: Server-side request forgery via DNS rebinding in external request handling

Impact Ghost’s private-IP check for outbound HTTP requests could be bypassed via DNS rebinding, allowing an attacker to coerce the Ghost server into reaching hosts on internal networks through features that issue external fetches. Vulnerable versions This vulnerability is present in Ghost from...

NPM: Ghost: Server-side request forgery via DNS rebinding in external request handling

NPM: Ghost: Server-side request forgery via DNS rebinding in external request handling vulnerability discovered by ? in WordPress Npm ghost versions = 6.0.9, 6.21.1...

Ghost: Private IP filtering bypass to make server-side requests to internal services

Impact When making an external request, it is possible to bypass the IP filter that ensures the request isn't going to an internal service using an IPv6 literal which maps to a private IPv4 address. Vulnerable versions This vulnerability is present in Ghost from v6.0.9 up to v6.21.0. Patches...