GHSA-HQQ2-XQR2-FMX2 Ghost : Stored XSS via SVG Files in Content Imports

Impact SVG images included in content imports were stored without sanitization. An attacker who convinced an Administrator to import a crafted file could host scripts on the site's domain, possibly resulting in compromise of staff users' admin sessions. Vulnerable versions This vulnerability is...

EUVD-2026-92760

Ghost: Stored XSS via oEmbed Photo Responses...

Ghost: Stored XSS via oEmbed Photo Responses

Impact Embedding a URL from an attacker-controlled website could result in untrusted scripts being stored in post content. These scripts could run in the Ghost editor, on the published site, and in newsletter emails, possibly resulting in compromise of a staff user's admin session. Vulnerable...

GHSA-V3XR-G6P2-FVGV Ghost: Stored XSS via oEmbed Photo Responses

Impact Embedding a URL from an attacker-controlled website could result in untrusted scripts being stored in post content. These scripts could run in the Ghost editor, on the published site, and in newsletter emails, possibly resulting in compromise of a staff user's admin session. Vulnerable...

EUVD-2026-92761

Ghost: Stored XSS via Bookmark Card Images...

GHSA-53VV-XM9F-MM82 Ghost: Password Hash Ordering Disclosure in Ghost Admin API

Impact Any staff-level user was able to determine the relative ordering of other staff users' hashed passwords. This does not directly disclose password hashes, and does not provide a practical path to recovering a password. Vulnerable versions This vulnerability is present in Ghost from v0.7.2 u...

Ghost: Password Hash Ordering Disclosure in Ghost Admin API

Impact Any staff-level user was able to determine the relative ordering of other staff users' hashed passwords. This does not directly disclose password hashes, and does not provide a practical path to recovering a password. Vulnerable versions This vulnerability is present in Ghost from v0.7.2 u...

NPM: Ghost: Password Hash Ordering Disclosure in Ghost Admin API

NPM: Ghost: Password Hash Ordering Disclosure in Ghost Admin API vulnerability discovered by ? in WordPress Npm ghost versions = 0.7.2, 6.64.0...

NPM: Ghost: Invite Token Disclosure in Ghost Admin API

NPM: Ghost: Invite Token Disclosure in Ghost Admin API vulnerability discovered by ? in WordPress Npm ghost versions = 4.39.0, 6.64.0...

Ghost: Invite Token Disclosure in Ghost Admin API

Impact Staff users with permission to view staff invites were able to discover the secret token of pending invites, including invites for roles with higher privileges than their own. This could allow a staff user to escalate their privileges by accepting a pending invite. Vulnerable versions This...

GHSA-V6Q3-XQXM-6F5V Ghost: Invite Token Disclosure in Ghost Admin API

Impact Staff users with permission to view staff invites were able to discover the secret token of pending invites, including invites for roles with higher privileges than their own. This could allow a staff user to escalate their privileges by accepting a pending invite. Vulnerable versions This...

CMS-Made-Simple-2.2.9-CVE-2019-9053

إخلاء مسؤولية يوفر هذا المستودع استغلالًا متوافقًا مع Python 3 يستهدف ثغرة حقن SQL غير مصادق عليها في إصدارات CMS Made Simple 2.2.9 والإصدارات الأقدم. الثغرة، التي تُتبع باسم CVE-2019-9053، تسمح للمهاجمين باستخراج بيانات المسؤول الحساسة، بما في ذلك اسم المستخدم، وكلمة المرور المشفرة، والبريد...

CVE-2024-27198_Lab

CVE-2024-27198Lab Vulnerability Research & Purple Team Demonstration Lab for JetBrains TeamCity Authentication Bypass CVE-2024-27198 Table of Contents About The Project CVE Details Built With Threat Intelligence & OSINT Real-World Impact & Exploitation Why this CVE is Critical Getting Started...

7zip-CVE-2025-11001

Utilisation : python3 exploit.py -t "C:\Users\pac\Desktop" -o demo.zip --data-file calc.exe Exploitation de 7-zip La vulnérabilité n'est exploitable que sous Windows et comporte une limitation majeure. Le bogue ne peut être exploité que lorsque 7-Zip est exécuté avec des privilèges d'administrate...

EUVD-2026-94455

Homer is open source telecom observability software. Prior to version 11.0.283, on every fresh Homer deployment using internal authentication, the bootstrap process automatically creates an admin account with the password sipcapture stored as a legacy SHA-256 hex hash. There is no first-login...

GHSA-6XP5-7RCX-XFGX Homer: Hardcoded Default Admin Password 'sipcapture' With No Forced Change on First Login

Summary On every fresh Homer deployment using internal authentication, the bootstrap process automatically creates an admin account with the password sipcapture stored as a legacy SHA-256 hex hash. There is no first-login forced-change mechanism. Any attacker who reaches the login endpoint...

-Limesurvey-RCE-CVE-2021-44967

🚀 LimeSurvey RCE CVE-2021-44967 - تنفيذ الأوامر عن بُعد مع المصادقة يحتوي هذا المستودع على استغلال وظيفي لـ CVE-2021-44967 ، وهي ثغرة تنفيذ الأوامر عن بُعد مع المصادقة في LimeSurvey. 🎯 التوافق تم اختباره وتأكيد عمله على: LimeSurvey 5.2.x LimeSurvey 6.x 🐛 نظرة عامة على الثغرة تسمح الثغرة لمستخدم...

CVE-2026-20896

كود إثبات المفهوم CVE-2026-20896 يقوم هذا البرنامج النصي بأتمتة استغلال الثغرة المنطقية في التحقق من مسارات واجهة برمجة التطبيقات الخاصة بـ Gitea، مما يسمح بإجبار الخادم على منح رمز إداري صالح من خلال هجوم تجاوز الدليل Directory Traversal في رأس التفويض. !/usr/bin/env python3 PoC: Gitea...

wger: cross-tenant admin notes/contracts leak via gym=None bypass (5 views)

Summary Five gym management views in wger apply a flawed gym-scope guard gyma != gymb that silently passes when both operands are None. A trainer with gym.gymtrainer and gym.addadminusernote permissions and no gym assignment gym=None can read private admin notes, uploaded documents, gym contracts...

GHSA-C72H-82W6-RQFP wger: cross-tenant admin notes/contracts leak via gym=None bypass (5 views)

Summary Five gym management views in wger apply a flawed gym-scope guard gyma != gymb that silently passes when both operands are None. A trainer with gym.gymtrainer and gym.addadminusernote permissions and no gym assignment gym=None can read private admin notes, uploaded documents, gym contracts...