108977 matches found
CVE-2026-95264
Feehi CMS 2.1.1 is vulnerable to Directory Traversal. An authenticated backend user with article edit permission can delete arbitrary files writable by the PHP process. Article image metadata is used to construct a filesystem path and is passed to unlink without path traversal or directory...
CVE-2026-105676
Ghost is a Node.js content management system. From 1.20.0 until 6.64.0, a vulnerability in how Ghost loads theme translation files allowed an authenticated Administrator to read JSON files outside of the active theme's directory, potentially exposing server configuration secrets. This issue is...
CVE-2026-105677
Ghost is a Node.js content management system. From 6.10.3 until 6.64.0, a vulnerability in how Ghost loads theme translation files allowed an authenticated Administrator to execute arbitrary code on the server via a crafted theme. This issue is fixed in version 6.64.0...
CVE-2026-105683
The Ghost Node.js content management system is vulnerable to a path traversal vulnerability (CWE-35) in the ImageSize Service . Affected versions range from 6.14.0 until 6.27.0 . Due to an input validation issue, authenticated staff users could access local files outside of the intended data stor...
CVE-2026-105683 Ghost: Path Traversal Vulnerability in Ghost ImageSize Service
Ghost is a Node.js content management system. From 6.14.0 until 6.27.0, an input validation issue may have allowed staff users to access local files outside the intended data storage directories on the server. This issue is fixed in version 6.27.0...
CVE-2026-105683 Ghost: Path Traversal Vulnerability in Ghost ImageSize Service
Ghost is a Node.js content management system. From 6.14.0 until 6.27.0, an input validation issue may have allowed staff users to access local files outside the intended data storage directories on the server. This issue is fixed in version 6.27.0...
CVE-2026-105683 Ghost: Path Traversal Vulnerability in Ghost ImageSize Service
Ghost is a Node.js content management system. From 6.14.0 until 6.27.0, an input validation issue may have allowed staff users to access local files outside the intended data storage directories on the server. This issue is fixed in version 6.27.0...
CVE-2026-105677 Ghost: Remote Code Execution via Theme Translation Files
Ghost is a Node.js content management system. From 6.10.3 until 6.64.0, a vulnerability in how Ghost loads theme translation files allowed an authenticated Administrator to execute arbitrary code on the server via a crafted theme. This issue is fixed in version 6.64.0...
CVE-2026-105677 Ghost: Remote Code Execution via Theme Translation Files
Ghost is a Node.js content management system. From 6.10.3 until 6.64.0, a vulnerability in how Ghost loads theme translation files allowed an authenticated Administrator to execute arbitrary code on the server via a crafted theme. This issue is fixed in version 6.64.0...
CVE-2026-105677
The Ghost Node.js content management system is vulnerable to Remote Code Execution (RCE) in versions 6.10.3 through 6.64.0 . The root cause lies in the way the software loads theme translation files , which can be exploited by an authenticated Administrator to execute arbitrary code on the server...
CVE-2026-105677 Ghost: Remote Code Execution via Theme Translation Files
Ghost is a Node.js content management system. From 6.10.3 until 6.64.0, a vulnerability in how Ghost loads theme translation files allowed an authenticated Administrator to execute arbitrary code on the server via a crafted theme. This issue is fixed in version 6.64.0...
CVE-2026-105676 Ghost: Path Traversal via Locale Setting
Ghost is a Node.js content management system. From 1.20.0 until 6.64.0, a vulnerability in how Ghost loads theme translation files allowed an authenticated Administrator to read JSON files outside of the active theme's directory, potentially exposing server configuration secrets. This issue is...
CVE-2026-105676
Ghost, a Node.js content management system , is vulnerable to a path traversal flaw in how it loads theme translation files. Affected versions range from 1.20.0 until 6.64.0 . An authenticated Administrator can exploit this vulnerability to read JSON files outside of the active theme's directory,...
CVE-2026-105676 Ghost: Path Traversal via Locale Setting
Ghost is a Node.js content management system. From 1.20.0 until 6.64.0, a vulnerability in how Ghost loads theme translation files allowed an authenticated Administrator to read JSON files outside of the active theme's directory, potentially exposing server configuration secrets. This issue is...
MiniPlasma-Runner
MiniPlasma-Runner Version modifiée de Nightmare-Eclipse/MiniPlasma CVE-2020-17103 adaptée pour une utilisation C2. Le PoC original s'exécute uniquement depuis le disque. Cette version s'exécute entièrement depuis la mémoire via execute-assembly, avec une approche de binaire fractionné pour éviter...
CVE-2026-105644 Ghost: Stored XSS via SVG Files in Content Imports
Ghost is a Node.js content management system. From 4.0.0 until 6.67.0, SVG images included in content imports were stored without sanitization. An attacker who convinced an Administrator to import a crafted file could host scripts on the site's domain, possibly resulting in compromise of staff...
CVE-2026-105644 Ghost: Stored XSS via SVG Files in Content Imports
Ghost is a Node.js content management system. From 4.0.0 until 6.67.0, SVG images included in content imports were stored without sanitization. An attacker who convinced an Administrator to import a crafted file could host scripts on the site's domain, possibly resulting in compromise of staff...
CVE-2026-105644
The Ghost Node.js content management system is vulnerable to Stored XSS in versions 4.0.0 through 6.67.0 . The root cause is the lack of sanitization for SVG images included during content imports. An attacker could trick an Administrator into importing a crafted file, enabling the execution of s...
UBUNTU-CVE-2026-93320
BuildKit may be tricked into performing file actions with special file inodes where regular files are expected. Special files may block operations or, on rootful workers, allow unintended host device access...
[SECURITY] [DSA 6543-1] libreoffice security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6543-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 05, 2026 https://www.debian.org/security/faq -...