CVE-2018-10467

CVE-2018-10467 Timeline 2018-04-06: Discovered 2018-04-13: Retest on staging environment 2018-04-16: Internal communication 2018-04-27: Vendor notification 2018-04-27: Vendor feedback 2018-05-27: Technical clarifications of the product 2018-05-03: Added instructions to fix the issue from the vend...

CVE-2025-12399

Alex Reservations: Smart Restaurant Booking = 2.2.3 - Authenticated Admin+ Arbitrary File Upload The WordPress Alex Reservations plugin versions 2.2.3 and prior contains an arbitrary file upload vulnerability that allows authenticated WordPress administrators to upload malicious PHP files to the...

CVE-2018-10715

CVE-2018-10715 Timeline 2018-04-06: Discovered 2018-04-13: Retest staging environment 2018-04-16: Internal communication 2018-05-03: Vendor notification 2018-05-03: Vendor feedback 2018-05-XX: Technical clarifications of the product 2018-05-XX: Added instructions to fix the issue from the vendor...

subcrawl

SubCrawl SubCrawl is a framework developed by Patrick Schläpfer, Josh Stroschein and Alex Holland of HP Inc’s Threat Research team. SubCrawl is designed to find, scan and analyze open directories. The framework is modular, consisting of four components: input modules, processing modules, output...

CVE-2018-12597

CVE-2018-12597 CVE-2018-12597 Timeline ================ 2018-06-08: Discovered 2018-06-11: Retest staging environment 2018-06-12: Retest live environment 2018-06-19: Internal communication 2018-06-21: Vendor notification 2018-06-XX: Vendor feedback 2018-06-XX: Vendor feedback product will be...

ghost-blade (0.1.0), ohm (>=0.1.7, <=0.1.10) +1 more potentially affected by CVE-2026-104415 +1 more via ghost (>=0.11.14, <=1.26.2)

ghost NPM version =0.11.14, =0.1.7, =0.1.10 - sign-alex 1.0.1 Source cves: CVE-2026-104415, CVE-2026-105652 Source advisory: OSV:GHSA-53VV-XM9F-MM82...

sign-alex (1.0.1) potentially affected by CVE-2026-104417 +1 more via ghost (1.26.2)

ghost NPM version 1.26.2 is affected by a known vulnerability. The following packages have a transitive dependency on ghost and may be impacted: - sign-alex 1.0.1 Source cves: CVE-2026-104417, CVE-2026-105676 Source advisory: OSV:GHSA-M382-6JW4-FMP6...

sign-alex (1.0.1) potentially affected by CVE-2026-105676 via ghost (1.26.2)

ghost NPM version 1.26.2 is affected by a known vulnerability. The following packages have a transitive dependency on ghost and may be impacted: - sign-alex 1.0.1 Source cves: CVE-2026-105676 Source advisory: GHSA-M382-6JW4-FMP6...

sign-alex (1.0.1) potentially affected by CVE-2026-105682 via ghost (1.26.2)

ghost NPM version 1.26.2 is affected by a known vulnerability. The following packages have a transitive dependency on ghost and may be impacted: - sign-alex 1.0.1 Source cves: CVE-2026-105682 Source advisory: GHSA-354H-GMHV-MR9C...

sign-alex (1.0.1) potentially affected by CVE-2026-103287 +1 more via ghost (1.26.2)

ghost NPM version 1.26.2 is affected by a known vulnerability. The following packages have a transitive dependency on ghost and may be impacted: - sign-alex 1.0.1 Source cves: CVE-2026-103287, CVE-2026-105682 Source advisory: OSV:GHSA-354H-GMHV-MR9C...

sign-alex (1.0.1) potentially affected by CVE-2026-105682 via ghost (1.26.2)

ghost NPM version 1.26.2 is affected by a known vulnerability. The following packages have a transitive dependency on ghost and may be impacted: - sign-alex 1.0.1 Source cves: CVE-2026-105682 Source advisory: MEND:CVE-2026-105682...

ghost-as-middleware (1.0.0), ghost-blade (0.1.0) +3 more potentially affected by CVE-2026-105678 via ghost (>=0.5.10, <=1.26.2)

ghost NPM version =0.5.10, =0.1.7, =0.1.10 - persistent-ghost 0.8.2 - sign-alex 1.0.1 Source cves: CVE-2026-105678 Source advisory: MEND:CVE-2026-105678...

sign-alex (1.0.1) potentially affected by CVE-2026-105676 via ghost (1.26.2)

ghost NPM version 1.26.2 is affected by a known vulnerability. The following packages have a transitive dependency on ghost and may be impacted: - sign-alex 1.0.1 Source cves: CVE-2026-105676 Source advisory: MEND:CVE-2026-105676...

ghost-blade (0.1.0), ohm (>=0.1.7, <=0.1.10) +1 more potentially affected by CVE-2026-105652 via ghost (>=0.11.14, <=1.26.2)

ghost NPM version =0.11.14, =0.1.7, =0.1.10 - sign-alex 1.0.1 Source cves: CVE-2026-105652 Source advisory: MEND:CVE-2026-105652...

@fancyliu/speclite (>=0.1.0, <=0.4.1), actual-moneymoney (>=3.0.0, <=3.6.0) +1 more potentially affected by CVE-2026-77465 via toml (>=4.1.1, <=4.1.2)

toml NPM version =4.1.1, =0.1.0, =3.0.0, =2.7.0, =2.12.4 Source cves: CVE-2026-77465 Source advisory: OSV:GHSA-82X6-Q7MM-W9CF...

@fancyliu/speclite (>=0.1.0, <=0.4.1), actual-moneymoney (>=3.0.0, <=3.6.0) +1 more potentially affected by CVE-2026-63376 via toml (4.1.1)

toml NPM version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on toml and may be impacted: - @fancyliu/speclite =0.1.0, =3.0.0, =2.7.0, =2.11.3 Source cves: CVE-2026-63376 Source advisory: OSV:GHSA-V5MP-JGW5-2X6J...

ghost-blade (0.1.0), ohm (>=0.1.7, <=0.1.10) +1 more potentially affected by CVE-2026-70593 via ghost (>=0.11.14, <=1.26.2)

ghost NPM version =0.11.14, =0.1.7, =0.1.10 - sign-alex 1.0.1 Source cves: CVE-2026-70593 Source advisory: GHSA-CJC9-Q5GF-327P...

ghost-blade (0.1.0), ohm (>=0.1.7, <=0.1.10) +1 more potentially affected by CVE-2026-70593 via ghost (>=0.11.14, <=1.26.2)

ghost NPM version =0.11.14, =0.1.7, =0.1.10 - sign-alex 1.0.1 Source cves: CVE-2026-70593 Source advisory: MEND:CVE-2026-70593...

sign-alex (1.0.1) potentially affected by CVE-2026-70592 via ghost (1.26.2)

ghost NPM version 1.26.2 is affected by a known vulnerability. The following packages have a transitive dependency on ghost and may be impacted: - sign-alex 1.0.1 Source cves: CVE-2026-70592 Source advisory: OSV:GHSA-CJ62-HVV2-2Q5H...

sign-alex (1.0.1) potentially affected by CVE-2026-70592 via ghost (1.26.2)

ghost NPM version 1.26.2 is affected by a known vulnerability. The following packages have a transitive dependency on ghost and may be impacted: - sign-alex 1.0.1 Source cves: CVE-2026-70592 Source advisory: SNYK:JS-GHOST-18612530...