EUVD-2026-99012

wallabag 2.6.13 through 2.6.14 contains a stored cross-site scripting vulnerability that allows authenticated users to host arbitrary HTML by triggering a failed Pocket HTML, Pocket CSV or Shaarli import. Attackers can upload an HTML file with script but no anchor elements, leaving it at the...

Impact of Security Modeling Fidelity on Hyperscale Data Center Hosting Capacity Assessment

This paper assesses hyperscale data center hosting capacity in transmission grids. Hosting capacity HC analysis quantifies the maximum additional load a bus can accommodate without violating operational constraints. This paper defines data center HC as the maximum time-invariant active power dema...

PT-2026-111350

Ghost is a Node.js content management system. From 5.94.0 until 6.64.0, when creating a bookmark card, Ghost could store non-image files fetched from an external website as bookmark icons or thumbnails. This allowed any staff user, including Contributors, to host arbitrary HTML on the site's...

PT-2026-111356

Ghost is a Node.js content management system. From 6.22.1 until 6.64.0, Ghost restricted the content type used to serve uploaded files to prevent browsers from executing them. On sites using the default local storage adapter, this restriction was not applied, so files uploaded by any staff user...

Why Robust VPS Hosting Helps OpenClaw Run Faster and More Reliably

OpenClaw is not a chatbot that waits for a prompt. It is an autonomous agent that runs real…...

pwndrop

pwndrop es un servicio de alojamiento de archivos autodesplegable para enviar cargas útiles de red team o compartir de forma segura tus archivos privados a través de HTTP y WebDAV. Si alguna vez has necesitado configurar rápidamente un servidor web nginx/apache para alojar tus archivos y nunca...

web_exploit_detector

Web Exploit Detector Introducción Web Exploit Detector es una aplicación Node.js y un módulo NPM utilizada para detectar posibles infecciones, código malicioso y archivos sospechosos en entornos de alojamiento web. Esta aplicación está pensada para ejecutarse en servidores web que alojen uno o má...

satellite

satellite Satellite es un servicio de alojamiento de payloads web que filtra las solicitudes para asegurar que el objetivo correcto recibe el payload. También puede ser un servicio útil para alojar archivos que solo deben ser accedidos en circunstancias muy específicas. Guía de inicio rápido 1...

authentik

What is authentik? authentik is an open-source Identity Provider IdP for modern SSO. It supports SAML, OAuth2/OIDC, LDAP, RADIUS, and more, designed for self-hosting from small labs to large production clusters. Our enterprise offering is available for organizations to securely replace existing...

reverseip_py

reverseippy Analizador de dominios para la búsqueda inversa de IP de IPAddress.com. Escrito en Python 3. ¿Qué es Reverse IP? Reverse IP se refiere al proceso de buscar todos los nombres de dominio que están alojados en una dirección IP particular. Esto puede ser útil por diversas razones, como...

EUVD-2026-92633

Ghost : Stored XSS via SVG Files in Content Imports...

EUVD-2026-92756

Ghost: Stored XSS via SVG Uploads Bypassing Sanitization...

GHSA-8575-CR6V-7JH4 Ghost: Stored XSS via SVG Uploads Bypassing Sanitization

Impact SVG media thumbnails, and SVG images uploaded with a non-SVG file extension, were stored without sanitization. This allowed any staff user, including Contributors, to host scripts on the site's domain, possibly resulting in compromise of other staff users' admin sessions. Vulnerable versio...

Ghost: Stored XSS via SVG Uploads Bypassing Sanitization

Impact SVG media thumbnails, and SVG images uploaded with a non-SVG file extension, were stored without sanitization. This allowed any staff user, including Contributors, to host scripts on the site's domain, possibly resulting in compromise of other staff users' admin sessions. Vulnerable versio...

EUVD-2026-92770

Ghost: Stored XSS via File Uploads on Local Storage...

CVE-2026-105649

Ghost is a Node.js content management system. From 4.22.0 until 6.65.0, SVG media thumbnails and SVG images uploaded with a non-SVG file extension were stored without sanitization. This allowed any staff user, including Contributors, to host scripts on the site's domain, possibly resulting in...

CVE-2026-105679

Ghost is a Node.js content management system. From 6.22.1 until 6.64.0, Ghost restricted the content type used to serve uploaded files to prevent browsers from executing them. On sites using the default local storage adapter, this restriction was not applied, so files uploaded by any staff user...

CVE-2026-105679 Ghost: Stored XSS via File Uploads on Local Storage

Ghost is a Node.js content management system. From 6.22.1 until 6.64.0, Ghost restricted the content type used to serve uploaded files to prevent browsers from executing them. On sites using the default local storage adapter, this restriction was not applied, so files uploaded by any staff user...

CVE-2026-105644

Ghost is a Node.js content management system. From 4.0.0 until 6.67.0, SVG images included in content imports were stored without sanitization. An attacker who convinced an Administrator to import a crafted file could host scripts on the site's domain, possibly resulting in compromise of staff...

CVE-2026-105651

Ghost is a Node.js content management system. From 5.94.0 until 6.64.0, when creating a bookmark card, Ghost could store non-image files fetched from an external website as bookmark icons or thumbnails. This allowed any staff user, including Contributors, to host arbitrary HTML on the site's...