CVE-2026-104412

Ghost versions 0.5.0 before 6.64.0 are vulnerable to a privilege escalation flaw due to improper restrictions on staff role assignments. An authenticated user with an Editor or Super Editor role can bypass permission checks to assign their own role to other staff members. Specifically, these user...

EUVD-2026-91423

Ghost 0.5.0 before 6.64.0 does not correctly restrict staff role assignment, allowing users with the Editor or Super Editor role to assign their own role to other staff despite lacking permission to do so. An authenticated Editor or Super Editor can promote Author and Contributor users to Editor ...

CVE-2026-104412 Ghost 0.5.0 before 6.64.0 Privilege Escalation via Staff Role Assignment

Ghost 0.5.0 before 6.64.0 does not correctly restrict staff role assignment, allowing users with the Editor or Super Editor role to assign their own role to other staff despite lacking permission to do so. An authenticated Editor or Super Editor can promote Author and Contributor users to Editor ...

CVE-2026-104411 Ghost 6.22.1 before 6.64.0 Stored XSS via Local Storage File Uploads

Ghost from 6.22.1 before 6.64.0 contains a stored cross-site scripting vulnerability that allows staff users to host scripts by uploading files served with extension-derived content types on the default local storage adapter. Attackers can upload script-bearing files to the site's domain to...

CVE-2026-104411

Ghost versions 6.22.1 before 6.64.0 are vulnerable to a stored cross-site scripting (XSS) vulnerability. The flaw exists because the default local storage adapter allows staff users to upload files served with extension-derived content types , enabling them to host malicious scripts. An attacker ...

EUVD-2026-91422

Ghost from 6.22.1 before 6.64.0 contains a stored cross-site scripting vulnerability that allows staff users to host scripts by uploading files served with extension-derived content types on the default local storage adapter. Attackers can upload script-bearing files to the site's domain to...

CVE-2026-104411 Ghost 6.22.1 before 6.64.0 Stored XSS via Local Storage File Uploads

Ghost from 6.22.1 before 6.64.0 contains a stored cross-site scripting vulnerability that allows staff users to host scripts by uploading files served with extension-derived content types on the default local storage adapter. Attackers can upload script-bearing files to the site's domain to...

CVE-2026-104411 Ghost 6.22.1 before 6.64.0 Stored XSS via Local Storage File Uploads

Ghost from 6.22.1 before 6.64.0 contains a stored cross-site scripting vulnerability that allows staff users to host scripts by uploading files served with extension-derived content types on the default local storage adapter. Attackers can upload script-bearing files to the site's domain to...

GHOSTCHECK-cve-2015-0235

Ghostcheck This is a really, really light fabric script - for checking the impact of CVE-2015-0235 GHOST on a running linux host. Forked into Lyrical after writing. Python 2.6 and higher recommended, and Fabric is needed. Usage: fab -f ghostcheck.py -u sshusername -p sshpassword -H ip ,ip2 ,ipN g...

CVE-2026-26980

CVE-2026-26980 ★ CVE-2026-26980 TryGhost Ghost CMS Content API SQLインジェクション PoC ★ https://github.com/user-attachments/assets/e7fab29e-8382-4ecc-986c-68852c28a32c 概要 CVE-2026-26980 は、TryGhost Ghost CMS Content API における未認証の SQL インジェクション脆弱性です。この脆弱なパスは、slug:... の順序処理が行われる際に、公開 Content API...

cookbook-update-glibc

cookbook-update-glibc 개요 glibc 업데이트를 위한 cookbook입니다. CVE-2015-0235GHOST 일본 http://www.walbrix.com/jp/blog/2015-01-ghost.html 영어 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0235 설명 Chef Solo를 사용하여 glibc를 업데이트합니다. 주의: 이 cookbook은 재부팅이 필요합니다. 지원 플랫폼: Ubuntu 및 CentOS. 요구 사항 cookbook...

ghost-hoock

ghost-hoock A minimal fork of GhostLock that keeps only one primitive : turning off SELinux via CVE-2026-43499 futex PI UAF. -green Table of contents What is this How it works What was kept from the original What was removed Building Running Requirements Limitations and risks Project layout Licen...

CVE-2026-29053

CVE-2026-29053 Ghost CMS における jsonpath/static-eval プロトタイプチェーンを介した RCE。 情報 CVE : CVE-2026-29053 影響を受けるバージョン : Ghost -p 1. リスナーを起動: nc -lvnp 2. malicious-theme.zip を Ghost Admin → Settings → Design にアップロード 3. スラッグ rce のページを作成 4. /rce/ にアクセス 参考情報...

ghost-cve-2026-26980

CVE-2026-26980 — Ghost CMS Content API SQLインジェクションラボ Ghost CMSのContent APIのスラッグフィルタリング順序機構を介した、認証不要のブラインドSQLインジェクション。認証情報なしで任意のGhostインスタンスからデータベースを読み取ることが可能です。 | ---|--- CVE| CVE-2026-26980 Advisory| GHSA-w52v-v783-gw97 CVSS| 9.4 Critical CWE| CWE-89 SQLインジェクション 影響を受けるバージョン| Ghost 3.24.0 -- 6.19....

CYBERDUDEBIVASH-5G-Core-Key-Rotation-Ghost-Admin-Auditor

CYBERDUDEBIVASH 5Gコア鍵ローテーション＆ゴースト管理者監査ツール v1.1 © 2026 CYBERDUDEBIVASH – 全著作権所有 ゼロトラスト5G＆プライベートネットワークセキュリティの世界的権威 インド、オディシャ州、ブバネシュワル 5GコアソフトウェアにおけるCVE-2026-0622（ゴースト管理者の権限昇格＆マスター鍵の露出）を検出・修復するための本番環境対応ツール。 特徴 ゼロトラストAPI認証 ゴースト管理者イベント検出（NRFログ） マスター鍵ローテーション状態チェック（UDM/AUSF） 緊急強制鍵ローテーション（プレミアム）...

OpenStack Swift vulnerable to authenticated server-side request forgery

In OpenStack Swift before 2.37.2, proxy-server does not strip internal update headers X-Container-Host, X-Container-Device, X-Delete-At-Host, X-Delete-At-Device from client requests before forwarding them to object-servers. An authenticated user with write access can inject these headers to...

CVE-2026-29053

これは、同じCVEに対するrootxran氏のリポジトリのリワーク版です - https://github.com/rootxran/CVE-2026-29053 特定のGhost CMS環境でのテスト中に、元のテーマペイロードが致命的なHandlebarsエラーを引き起こしました。CMSは、author.hbsファイル内で非推奨または欠落したヘルパー（socialurl）を参照していたため、悪意のあるテーマのアクティベーションに失敗しました。...

ghostbusters15

Stories in Ready ghostbusters15 Ansible에서 실행되는 'CVE-2015-0235GHOST 수정' 플레이북...

CVE-2023-40028

CVE-2023-40028: Ghost CMS 심링크 악용 PoC 개요 이 저장소에는 Ghost CMS 5.59.1 이전 버전 에 영향을 미치는 로컬 파일 포함LFI 취약점인 CVE-2023-40028 의 악용을 시연하기 위한 개념 증명PoC 스크립트가 포함되어 있습니다. 이 취약점으로 인해 인증된 사용자는 심볼릭 링크심링크 파일을 업로드할 수 있으며, 공격자가 호스트 시스템의 임의 파일에 접근할 수 있습니다. 이 PoC 스크립트는 공격자가 민감한 시스템 파일을 가리키는 심링크가 포함된 조작된 zip 파일을 업로드하여 정보 공...

CVE-2023-40028

CVE-2023-40028에 대한 개념 증명PoC CVE-2023-40028은 Ghost CMS가 부적절한 파일 처리를 통해 임의 파일 읽기를 허용하는 취약점입니다. 이 PoC는 통제된 조건에서 익스플로잇이 어떻게 작동하는지 보여줍니다. 교육 목적으로만 사용하십시오. 참고: 원본 PoC는 0xyassine의 것을 각색했으며, Python으로 다시 작성하고 HackTheBox 챌린지 "LinkVortex"에 적용했습니다. 요약: 1. 취약점: Ghost CMS의 임의 파일 읽기. 2. 영향: 서버의 민감한 파일에 대한 접근. 3...