MAL-2025-49292 Malicious code in @alexandrsarioglo/npm-ghost-htb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ff0b87bff66ff36f0fe152f37cd1d7a0733b0a9ff2eecbd10e0b8ccc52e4437 The package @alexandrsarioglo/npm-ghost-htb was found to contain malicious code...

EUVD-2025-37278

Malicious code in gunpowder-ghost npm...

Malicious code in gunpowder-ghost (npm)

Four pirate-themed npm packages blackbeards-navigator, beusy, sirens-lament, gunpowder-ghost were published by the npm account beusy with heavily inflated version numbers 209.0.0–210.0.0, a hallmark of dependency confusion attacks. Each package contains identical malicious lifecycle scripts...

EUVD-2025-37286

Malicious code in @asarioglo/npm-ghost-htb npm...

Malicious code in @asarioglo/npm-ghost-htb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc1c8d6072a17a3bb6fd2befebfe8285665212b8e06d61773b14bacd1e01132a The package @asarioglo/npm-ghost-htb was found to contain malicious code...

MAL-2025-49278 Malicious code in @asarioglo/npm-ghost-htb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc1c8d6072a17a3bb6fd2befebfe8285665212b8e06d61773b14bacd1e01132a The package @asarioglo/npm-ghost-htb was found to contain malicious code...

MAL-2025-49286 Malicious code in gunpowder-ghost (npm)

Four pirate-themed npm packages blackbeards-navigator, beusy, sirens-lament, gunpowder-ghost were published by the npm account beusy with heavily inflated version numbers 209.0.0–210.0.0, a hallmark of dependency confusion attacks. Each package contains identical malicious lifecycle scripts...

Server Side Request Forgery (SSRF)

Ghost is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to improper validation of user-supplied URLs, which allows an attacker to send crafted requests to internal resources and potentially access sensitive information...

Preparing for the Digital Battlefield of 2026: Ghost Identities, Poisoned Accounts, & AI Agent Havoc

BeyondTrust’s annual cybersecurity predictions point to a year where old defenses will fail quietly, and new attack vectors will surge. Introduction The next major breach won’t be a phished password. It will be the result of a massive, unmanaged identity debt. This debt takes many forms: it’s the...

Preparing for the Digital Battlefield of 2026: Ghost Identities, Poisoned Accounts, & AI Agent Havoc

BeyondTrust's annual cybersecurity predictions point to a year where old defenses will fail quietly, and new attack vectors will surge. Introduction The next major breach won't be a phished password. It will be the result of a massive, unmanaged identity debt. This debt takes many forms: it's the...

CVE-2025-12342 Serdar Bayram Ghost Hot Spot Login Auth.php sql injection

A flaw has been found in Serdar Bayram Ghost Hot Spot up to 20251014. The affected element is an unknown function of the file /Auth.php of the component Login. This manipulation causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used...

CVE-2025-12342

Serdar Bayram Ghost Hot Spot contains a SQL injection flaw in the Login component, originating from an unknown function in /Auth.php. The issue affects versions up to 20251014 (PTSecurity notes later versions as 20251015+). Exploitation can be conducted remotely; multiple sources indicate the exp...

EUVD-2025-36389

A flaw has been found in Serdar Bayram Ghost Hot Spot up to 20251014. The affected element is an unknown function of the file /Auth.php of the component Login. This manipulation causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used...

CVE-2025-12342 Serdar Bayram Ghost Hot Spot Login Auth.php sql injection

A flaw has been found in Serdar Bayram Ghost Hot Spot up to 20251014. The affected element is an unknown function of the file /Auth.php of the component Login. This manipulation causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used...

PT-2025-44077

Name of the Vulnerable Software and Affected Versions Serdar Bayram Ghost Hot Spot versions prior to 20251015 Description A flaw exists in the Login component of Serdar Bayram Ghost Hot Spot. This issue is due to a SQL injection vulnerability within an unknown function of the /Auth.php file. The...

Serdar Bayram Ghost Hot Spot SQL注入漏洞

Serdar Bayram Ghost Hot Spot is a Portal Authentication System software by Serdar Bayram Individual Developer. A SQL injection vulnerability exists in Serdar Bayram Ghost Hot Spot 20251014 and earlier versions, which stems from a SQL injection vulnerability in the component Login in the file...

Ghost Web App Detection

Binary data ghostdetect.nbin...

Ghost CMS 5.42.1 - Path Traversal (CVE-2023-32235)

Binary data ghostcmspathtraversalcve-2023-32235.nbin...

CVE-2025-12342: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in Serdar Bayram Ghost Hot Spot up to 20251014. The affected element is an unknown function of the file /Auth.php of the component Login. This manipulation causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used...

3,000 YouTube Videos Exposed as Malware Traps in Massive Ghost Network Operation

A malicious network of YouTube accounts has been observed publishing and promoting videos that lead to malware downloads, essentially abusing the popularity and trust associated with the video hosting platform for propagating malicious payloads. Active since 2021, the network has published more...