CVE-2023-40028

CVE-2023-40028 POC para CVE-2023-40028: Leitura Arbitrária de Arquivos no Ghost CMS Descrição Ghost é um sistema de gerenciamento de conteúdo de código aberto. As versões anteriores a 5.59.1 estão sujeitas a uma vulnerabilidade que permite que usuários autenticados enviem arquivos que são links...

Ghost

Ghost Framework Ghost Framework ist ein Android-Post-Exploitation-Framework, das das Android Debug Bridge ausnutzt, um remote auf ein Android-Gerät zuzugreifen. Installation pip3 install git+https://github.com/EntySec/Ghost...

CVE-2017-9805-Exploit

Dieses Repository hat keine README-Datei...

GHOSTCHECK-cve-2015-0235

Ghostcheck Questo è uno script fabric molto, molto leggero - per verificare l'impatto di CVE-2015-0235 GHOST su un host linux in esecuzione. Forkato in Lyrical dopo la scrittura. Raccomandato Python 2.6 e superiori, e Fabric è necessario. Utilizzo: fab -f ghostcheck.py -u sshusername -p sshpasswo...

Ghost-5.58-Arbitrary-File-Read-CVE-2023-40028

Exploit di Lettura Arbitraria di File Ghost CVE-2023-40028 Panoramica Questo script sfrutta una vulnerabilità in Ghost CMS CVE-2023-40028 per leggere file arbitrari dal server. Sfruttando un collegamento simbolico symlink in un file ZIP caricato, un utente malintenzionato può ottenere accesso non...

SMSOTPBOT

ghost-OTPBOT ghost-OTPBOT è il bot per la cattura di OTP e SMS più avanzato e versatile, in grado di ottenere codici OTP e SMS dalle vittime impersonando un'azienda o una banca. Puoi usarlo per ottenere OTP per accessi, banche, carte di credito, Apple Pay e altro. Unisciti a...

CVE-2015-0235-workaround

CVE-2015-0235-workaround noto anche come vulnerabilità GHOST di glibc Un wrapper di libreria condivisa con controlli aggiuntivi per le funzioni vulnerabili gethostbyname2r e gethostbynamer . La soluzione corretta per CVE-2015-0235 è aggiornare glibc almeno a glibc-2.18. In alcuni casi, un...

CVE-2015-0235_GHOST

Questo repository non contiene un README...

ansible-CVE-2015-0235-GHOST

Este repositorio nao tem um README...

Ghost-Path-Traversal-CVE-2023-32235-

Report di Bug Bounty - Ghost Path Traversal CVE-2023-32235 Sommario L'applicazione Ghost è vulnerabile a una vulnerabilità di path traversal, identificata come CVE-2023-32235. Questa vulnerabilità consente a un attaccante di accedere a file sensibili al di fuori della directory prevista manipolan...

subjack

subjack DNS Takeover Scanner Subjack is a DNS takeover scanner written in Go designed to scan a list of domains concurrently and identify ones that are able to be hijacked. With Go's speed and efficiency, this tool really stands out when it comes to mass-testing. Always double check the results...

Exploit for SQL Injection in Ghost

CVE-2026-26980 ★ CVE-2026-26980 TryGhost Ghost CMS Content AP...

GHSA-RRWH-6JRQ-WP5V

creationtimestamp| type| source ---|---|--- 2026-08-20 17:51:42+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mtjsq4tke52x...

BIT-GHOST-2026-70596 Ghost: Cross-Site Scripting in Feature Image Captions

Ghost is a Node.js content management system. From 4.9.0 until 6.54.1, an input validation issue allowed any staff user to create a post with content in featureimagecaption that could be used to hijack another staff user's Ghost Admin session, resulting in privilege escalation. This issue is fixe...

BIT-GHOST-2026-70595 Ghost: Server-Side Request Forgery Mitigation Issue

Ghost is a Node.js content management system. From 6.26.0 until 6.54.1, a validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user to make limited HTTP requests to hosts in the Ghost server's internal network. A successful attack would not result i...

BIT-GHOST-2026-70594 Ghost: Session Fixation in Ghost Admin

Ghost is a Node.js content management system. From 2.2.0 until 6.54.1, Ghost Admin did not invalidate existing sessions on login which could have allowed for session fixation attacks. Successful exploitation would have required another vulnerability on the same domain where Ghost Admin was hosted...

BIT-GHOST-2026-70593 Ghost: Theme Upload Path Traversal

Ghost is a Node.js content management system. From 0.10.0 until 6.54.1, a vulnerability in custom themes allowed a staff user to write files outside of the uploads directory. This could be used to alter the behavior of the installation through custom theme upload path traversal in LocalStorageBas...

BIT-GHOST-2026-70592 Ghost: Database Backup Path Traversal

Ghost is a Node.js content management system. From 1.20.1 until 6.54.1, an Administrator-level user could remotely overwrite certain files on the filesystem through the database backup filename, leading to integrity and availability issues. The database export endpoint failed to reject path...

BIT-GHOST-2026-70591 Ghost: Server-Side Request Forgery in Image Fetching

Ghost is a Node.js content management system. From 0.10.0 until 6.54.1, a Server-Side Request Forgery in Ghost Admin image fetching allowed any staff-level user to perform a blind HTTP GET request against internal hosts. No output was returned, but this could have been used to probe open ports on...

BIT-GHOST-2026-70590 Ghost: Blind Password Hash Disclosure in Ghost Admin API

Ghost is a Node.js content management system. Prior to 6.54.1, any staff-level user was able to leak the hashed passwords of other staff users through the Ghost Admin API. An offline password-guessing attack against the hashes could lead to account takeover if successful, but Device Verification...