2521 matches found
CVE-2015-0235_GHOST
Este repositorio no tiene un README...
CVE-2023-40028
CVE-2023-4002 Ghost-Arbitrary-File-Read : El nombre de usuario o correo electrónico del Ghost CMS objetivo. --password : La contraseña del Ghost CMS objetivo. --url : La URL del Ghost CMS objetivo p. ej., http://website.com. 1. Inicio de sesión: El script se autentica con la API de administración...
ghost-checker
ghost-checker Prueba si estás expuesto a ghost CVE-2015-0235. Todo el crédito para Qualys Security Uso /tmp/ghost-checker master$ make cc -o ghost ghost.c /tmp/ghost-checker master$ ./ghost not vulnerable /tmp/ghost-checker master$ make clean rm ghost Créditos Equipo de Seguridad de Qualys...
Ghost-In-The-Logs
Fantasma en los Registros Esta herramienta te permite evadir sysmon y el registro de eventos de Windows. Mi artículo de blog al respecto se puede encontrar aquí. Uso Puedes obtener la última versión aquí Para empezar Una vez que tengas la última versión, ejecútala sin argumentos para ver los...
SMSOTPBOT
ghost-OTPBOT ghost-OTPBOT es el bot de captura de OTP y SMS más avanzado y versátil, capaz de obtener códigos OTP y SMS de las víctimas haciéndose pasar por una empresa o banco. Puedes usarlo para obtener OTP para inicios de sesión, bancos, tarjetas de crédito, Apple Pay y más. Únete a...
CVE-2023-40028
Exploit CVE-2023-40028 Este script explota una vulnerabilidad en Ghost CMS, permitiendo la lectura arbitraria de archivos mediante el abuso de enlaces simbólicos. Características Crea un enlace simbólico al archivo destino Comprime el payload en un archivo ZIP Sube el archivo ZIP a través de la A...
ghosttester
Script de prueba para la vulnerabilidad GHOST de Glibc CVE-2015-0235 Un pequeño script que encontré para probar la vulnerabilidad GHOST de Glibc CVE-2015-0235. El uso es bastante simple. Solo clona o descarga el script en tu servidor/escritorio y ejecútalo de la siguiente manera: Debian/Ubuntu gc...
cfengine-CVE_2015_0235
CVE20150235 Exploit de desbordamiento de búfer en gethostbyname de glibc - CVE-2015-0235 https://community.qualys.com/blogs/laws-of-vulnerabilities/2015/01/27/the-ghost-vulnerability Obtenido originalmente del mensaje de Ben Bomgardner a la lista de correo help-cfengine...
CVE-2026-104414
Ghost from 2.5.0 before 6.64.0 contains a stored cross-site scripting vulnerability that allows attackers to inject untrusted scripts into post content via oEmbed photo responses. Attackers can host malicious oEmbed photo responses so that embedding their URL stores scripts that run in the Ghost...
CVE-2026-104415
Ghost from 0.7.2 before 6.64.0 contains an information disclosure vulnerability in the Admin API that allows staff-level users to determine the relative ordering of other staff users' password hashes. Authenticated staff users can query the Admin API to infer hash ordering, though this does not...
CVE-2026-104417
Ghost from 1.20.0 before 6.64.0 contains a path traversal vulnerability in theme translation file loading that allows authenticated administrators to read JSON files outside the active theme directory. Attackers can manipulate the locale setting to load JSON files elsewhere on the server, exposin...
CVE-2026-104418
Ghost from 6.10.3 before 6.64.0 contains a remote code execution vulnerability that allows authenticated administrators to run code by abusing theme translation file loading. Attackers with administrator access can upload a crafted theme containing malicious translation files to execute arbitrary...
CVE-2026-104416
Ghost from 4.39.0 before 6.64.0 contains an information disclosure vulnerability in the Admin API that allows staff users to view secret tokens of pending staff invites. Staff users with invite viewing permission can accept pending invites for higher-privileged roles to escalate their privileges...
CVE-2026-104413
Ghost from 5.94.0 before 6.64.0 contains a stored cross-site scripting vulnerability that allows staff users, including Contributors, to host arbitrary HTML by abusing bookmark card image fetching. Attackers can create bookmark cards that store non-image files from external websites as icons or...
CVE-2026-104412
Ghost 0.5.0 before 6.64.0 does not correctly restrict staff role assignment, allowing users with the Editor or Super Editor role to assign their own role to other staff despite lacking permission to do so. An authenticated Editor or Super Editor can promote Author and Contributor users to Editor ...
CVE-2026-104411
Ghost from 6.22.1 before 6.64.0 contains a stored cross-site scripting vulnerability that allows staff users to host scripts by uploading files served with extension-derived content types on the default local storage adapter. Attackers can upload script-bearing files to the site's domain to...
EUVD-2026-91429
Ghost from 6.10.3 before 6.64.0 contains a remote code execution vulnerability that allows authenticated administrators to run code by abusing theme translation file loading. Attackers with administrator access can upload a crafted theme containing malicious translation files to execute arbitrary...
CVE-2026-104418 Ghost from 6.10.3 before 6.64.0 RCE via Theme Translation Files
Ghost from 6.10.3 before 6.64.0 contains a remote code execution vulnerability that allows authenticated administrators to run code by abusing theme translation file loading. Attackers with administrator access can upload a crafted theme containing malicious translation files to execute arbitrary...
CVE-2026-104418 Ghost from 6.10.3 before 6.64.0 RCE via Theme Translation Files
Ghost from 6.10.3 before 6.64.0 contains a remote code execution vulnerability that allows authenticated administrators to run code by abusing theme translation file loading. Attackers with administrator access can upload a crafted theme containing malicious translation files to execute arbitrary...
CVE-2026-104418
Ghost versions 6.10.3 before 6.64.0 are vulnerable to remote code execution (RCE) due to an abuse of the theme translation file loading mechanism. Authenticated administrators can exploit this by uploading a crafted theme containing malicious translation files to execute arbitrary code on the Gho...