CVE-2026-104418 Ghost from 6.10.3 before 6.64.0 RCE via Theme Translation Files

Ghost from 6.10.3 before 6.64.0 contains a remote code execution vulnerability that allows authenticated administrators to run code by abusing theme translation file loading. Attackers with administrator access can upload a crafted theme containing malicious translation files to execute arbitrary...

CVE-2026-104417 Ghost 1.20.0 before 6.64.0 Path Traversal via Locale Setting

Ghost from 1.20.0 before 6.64.0 contains a path traversal vulnerability in theme translation file loading that allows authenticated administrators to read JSON files outside the active theme directory. Attackers can manipulate the locale setting to load JSON files elsewhere on the server, exposin...

CVE-2026-104417 Ghost 1.20.0 before 6.64.0 Path Traversal via Locale Setting

Ghost from 1.20.0 before 6.64.0 contains a path traversal vulnerability in theme translation file loading that allows authenticated administrators to read JSON files outside the active theme directory. Attackers can manipulate the locale setting to load JSON files elsewhere on the server, exposin...

CVE-2026-104417

The Ghost platform (versions 1.20.0 before 6.64.0 ) is vulnerable to a path traversal flaw in the theme translation file loading mechanism. This issue allows authenticated administrators to manipulate the locale setting to load JSON files from locations outside the active theme directory. Success...

EUVD-2026-91428

Ghost from 1.20.0 before 6.64.0 contains a path traversal vulnerability in theme translation file loading that allows authenticated administrators to read JSON files outside the active theme directory. Attackers can manipulate the locale setting to load JSON files elsewhere on the server, exposin...

xyntia

此存储库没有 README。...

CVE-2026-85706-PoC

CVE-2026-85706：GitLab CE/EE 未认证任意本地文件读取 CVE-2026-85706 是 GitLab CE/EE Repository Commits 和 Repository Files API 中的一个严重路径遍历 / 缺失认证漏洞：未认证的攻击者可以令服务器读取任意文件，并通过错误通道获取其内容。CVSS 3.1 10.0 （CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N）。 GitLab 的官方标题为 “仓库提交 API 中的路径遍历漏洞影响 GitLab CE/EE” 。修复程序 于 2026-09-10 在...

Anxun-isoon

ocr.json ：包含从 png 文件处理得到的 CN 文本 ocroutputtranslated.json ：包含翻译后的 ocr.json 文件，翻译使用本地运行的 LLM（facebook/mbart-large-50-many-to-many-mmt）完成 所有使用的脚本位于 /userscripts...

msi-search

MSI 搜索 Windows 在 C:\Windows\Installer\ 中以随机文件名（由字母和数字组成，后跟 ".msi" 扩展名）缓存 MSI 文件。该工具简化了红队操作员和安全团队识别哪些 MSI 文件对应哪些软件的任务，并使他们能够下载相关文件，以通过 MSI 修复调查本地权限提升漏洞。更多关于 MSI 修复漏洞的信息，请参阅通过第三方 Windows 安装程序提升权限。 作者：Andrew Oliveau @AndrewOliveau 编译 x8664-w64-mingw32-gcc -c msisearch.c -o msisearch.x64.o...

CVE-2026-15896

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.3.316 via the parserequest function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can...

ninja-forms-brute

Ninja Forms 3.6.8 - 未认证的电子邮件地址泄露 描述 该插件在导出提交内容时不会删除所创建的临时文件，这可能导致未经认证的攻击者在文件可公开访问且名称可猜测的情况下下载这些文件，并获取诸如提交表单用户的电子邮件地址等敏感信息。 概念验证 通过“下载所有提交”按钮导出所有提交时生成的 CSV 文件存储在 /wp-content/uploads// 文件夹中，格式如下：form--all-subs.csv 示例：https://example.com/wp-content/uploads/2022/03/form-1-all-subs.csv 如何运行 python3...

CVE-2026-15896

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to a Directory Traversal vulnerability in all versions up to and including 6.3.316 . The root cause lies in the parse_request function, specifically involving the 'sfgtfi' URL path parameter. This flaw allows unauthenti...

EUVD-2026-91180

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.3.316 via the parserequest function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can...

Quiksand-CVE-2023-24012

DDS Security Test ROS 2 DDS セキュリティ研究テスト環境、ROS 2 Foxy ベース。 プロジェクト概要 このプロジェクトは、ROS 2 SROS2 セキュリティフレームワークにおける権限バイパスの脆弱性を実演します。署名された権限ファイルを改変することで、攻撃者はノードに本来購読すべきでないトピックを購読させることができます。 環境要件 Docker クイックスタート イメージの構築 docker build -t dds-test . PoC の実行 docker run -it dds-test ./poc.sh PoC スクリプトの説明 poc.sh...

jsleak

jsleak jsleakは、正規表現パターンを使用してJSファイル内の機密データを特定するツールです。この目的のために作られていますが、正規表現パターンがあれば何でも特定するために使用できます。 インストール方法 直接: your package manager install pkg-config libpcre++-dev go get github.com/0xTeles/jsleak/v2/jsleak コンパイル済み: リリースページ 使用方法 -json string + 出力先のJsonファイル -pattern string + テストするパターンを含むファイル...

usbrip

usbrip inherited from "USB Ripper", not "USB R.I.P." is a simple forensics tool with command line interface that lets you keep track of USB device artifacts i.e., USB event history on Linux machines. Table of Contents: Description Quick Start Showcase System Log Structure Dependencies deb pip...

gitrob

Gitrob: OSINTにおけるオープンソースの活用 Gitrobは、Githubの公開リポジトリにプッシュされた潜在的に機密性の高いファイルを見つけるためのツールです。Gitrobは、ユーザーまたは組織に属するリポジトリを設定可能な深さまでクローンし、コミット履歴を反復処理して、潜在的に機密性の高いファイルのシグネチャに一致するファイルにフラグを立てます。結果はWebインターフェースを通じて表示され、簡単に閲覧・分析できます。 使い方 gitrob options target target2 ... targetN オプション -bind-address string Addres...

scanner-cli

Deprecation Notice: Hawkeye has reached its end of life. There are more modern options out there for you and your project. If you wish to pick up maintenance of the project, please feel free to contact me. You'll find means of reaching out to me on my personal homepage. . . . . . . The Hawkeye...

pe_tree

PE Tree PE Tree is a Python module for viewing Portable Executable PE files in a tree-view using pefile and PyQt5. It can also be used with IDA Pro, Ghidra, Volatility, Rekall and minidump to view and dump in-memory PE files, as well as perform import table reconstruction. Table of contents 1...

php-malware-finder

PHP Malware Finder | || || || | | | | || || | | || || || | Webshell finder, | || || | kiddies hunter, | | | |||| || | website cleaner. || || |||| Detect potentially malicious PHP files. What does it detect? PHP-malware-finder does its very best to detect obfuscated/dodgy code as well as files usi...