CVE-2026-26980-PoC

CVE-2026-26980 — Ghost CMS Content API Blind SQL Injection Affetti: Ghost 3.24.0 – 6.19.0 Corretto in: Ghost 6.19.1 Autenticazione richiesta: Nessuna — la chiave dell'API Content è pubblica Impatto: Lettura non autenticata dell'intero database credenziali, chiavi API Vulnerabilità...

ghost-cve-2026-26980

CVE-2026-26980 — Lab di SQL Injection nella Content API di Ghost CMS SQL injection blind non autenticata in Ghost CMS tramite il meccanismo di ordinamento del filtro slug della Content API, che consente letture arbitrarie del database da qualsiasi istanza Ghost senza credenziali...

Ghost CMS Content API - SQL Injection

Ghost CMS before 6.19.1 is vulnerable to a blind SQL injection in the /ghost/api/content/tags/ endpoint via the filter parameter. This template checks for the vulnerability by sending a boolean-based payload. id: CVE-2026-26980 info: name: Ghost CMS Content API - SQL Injection author:...

CVE-2026-26980-Ghost-CMS-Api

CVE-2026-26980 PoC di SQL Injection su Ghost CMS Questo repository contiene uno strumento proof-of-concept basato su Go per dimostrare e validare la vulnerabilità di SQL injection nell'API Content di Ghost CMS descritta da CVE-2026-26980. L'implementazione si basa sul flusso di exploit implementa...

CVE-2026-26980

CVE-2026-26980 ★ CVE-2026-26980 TryGhost Ghost CMS Content API SQL Injection PoC ★ https://github.com/user-attachments/assets/e7fab29e-8382-4ecc-986c-68852c28a32c 개요 CVE-2026-26980은 TryGhost Ghost CMS Content API에서 발생하는 인증되지 않은 SQL Injection 취약점입니다. 취약한 경로는 slug:... 순서가 처리될 때 공개 Content API 필터 처리...

CVE-2026-27886-check

CVE-2026-27886 Strumento di Valutazione della Vulnerabilità Rileva in modo sicuro se un'istanza di Strapi è vulnerabile a CVE-2026-27886 senza eseguire l'intera catena di account takeover. Consulta l'articolo completo sul blog di Bishop Fox. Descrizione CVE-2026-27886 è un bypass non autenticato...

CVE-2026-26980

CVE-2026-26980 — 👻 Ghost CMS SQLi non autenticata tramite Content API Una vulnerabilità di SQL injection era presente nella Content API di Ghost e consentiva ad attaccanti non autenticati di leggere dati arbitrari dal database...

CVE-2025-8110-gogs-poc

CVE-2025-8110 — Gogs Beliebiger Datei-Schreibzugriff PoC Proof-of-Concept für einen authentifizierten beliebigen Datei-Schreibzugriff in Gogs. Durch das Pushen eines Repositorys, das einen symbolischen Link enthält, der aus dem Repo hinausweist, und anschließendes Aktualisieren des Link-Inhalts...

Exploit for SQL Injection in Ghost

CVE-2026-26980 ★ CVE-2026-26980 TryGhost Ghost CMS Content AP...

CVE-2026-67617

Microweber CMS through 2.0.20 contains a stored cross-site scripting vulnerability in the content tagging system that allows admin-authenticated attackers to inject arbitrary JavaScript by submitting malicious payloads via the tagnames parameter of the GET /api/savecontentadmin endpoint, bypassin...

Strapi Content API Sanitization Bypass Detection Module Scanner

This Python script assesses exposure to CVE-2026-27886 in Strapi Content API endpoints by performing differential filter validation against where parameters. Detection compares baseline query behavior against controlledfilter predicates to determine whether unsanitized conditions reach backend...

BIT-GHOST-2026-53949 Ghost Content API filter bypass reveals private fields

Ghost is a Node.js content management system. From 5.46.1 until 6.21.2, the validation applied to filters on the public API endpoints could be partially bypassed, making it possible to reveal private fields via a brute force attack. If SQLite was used as the database password hashes were fully...

Exploit for SQL Injection in Ghost

CVE-2026-26980 — Ghost CMS Content API Blind SQL Injection...

CVE-2026-53949

Summary (CVE-2026-53949) Ghost CMS (Node.js). Affected versions: 5.46.1–6.21.2. Description: validation on filters for public API endpoints could be partially bypassed, enabling disclosure of private fields via brute-force. Impact depends on database: with SQLite, password hashes were fully acces...

CVE-2026-27886

Strapi is an open source headless content management system. Strapi versions starting in 4.0.0 and prior to 5.37.0 did not sufficiently sanitize query parameters when filtering content via relational fields. An unauthenticated attacker could use the where query parameter on any publicly-accessibl...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Strapi

CVE-2026-27886 Vulnerability Assessment Tool Safely detect wh...

GHSA-5H62-F8FG-4W7Q Duplicate Advisory: phpMyFAQ: Missing Authorization on Tag Deletion Allows Any Authenticated User to Delete Tags

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-7cx3-2qx2-3g6w. This link is maintained to preserve external references. Original Description phpMyFAQ before 4.1.2 contains a missing authorization vulnerability in the DELETE /admin/api/content/tags/tagId...

CVE-2026-22707

Strapi is an open source headless content management system. In Strapi versions prior to 5.33.3, the Upload plugin's Content API endpoints did not enforce the administrator-configured MIME type restrictions plugin.upload.security.allowedTypes and deniedTypes. The same restrictions were correctly...

EUVD-2026-30361

Strapi is an open source headless content management system. In Strapi versions prior to 5.33.3, the Upload plugin's Content API endpoints did not enforce the administrator-configured MIME type restrictions plugin.upload.security.allowedTypes and deniedTypes. The same restrictions were correctly...

CVE-2026-22707

In Strapi, prior to 5.33.3, the Upload plugin’s Content API endpoints did not enforce the administrator-configured MIME restrictions, allowing an authenticated Content API user to upload disallowed file types (e.g., HTML, SVG). The Content API handlers bypassed magic-byte MIME checks and allow/de...