Suricata-Rule-for-Detecting-CVE-2025-55182

Suricata Detection Rule for CVE‑2025‑55182 Next.js Action Poisoning → Node.js execSync RCE 📌 Description This document explains how Suricata rule SID 900304 detects exploitation attempts of CVE‑2025‑55182 , a critical vulnerability in Next.js that enables Action Poisoning leading to arbitrary...

Ghost CMS Remote Code Execution (CVE-2026-29053)

Exploits CVE-2026-29053 in Ghost CMS 0.7.2–6.19.0: a malicious theme template abuses Handlebars get filter parsing to reach Node.js childprocess.exec. Requires Ghost Admin access password, API key, session cookie, session secret, or invite flow. Versions 5.105.0–5.130.5 and 6.0.0–6.10.3 also...