17 matches found
CVE-2023-40028
Exploit PoC CVE-2023-40028 Vulnerabilidad de Carga de Enlace Simbólico en Ghost CMS que lleva a Lectura Arbitraria de Archivos Imagen del PoC Detalles de la Vulnerabilidad CVE-2023-40028 es una vulnerabilidad en Ghost CMS versiones anteriores a 5.59.1 , donde usuarios autenticados pueden cargar...
CVE-2023-40028
CVE-2023-40028: Lectura arbitraria de archivos en Ghost CMS Descripción Esta Prueba de Concepto POC se puede utilizar para explotar CVE-2023-40028 y lograr acceso de lectura de archivos en Ghost CMS. Ghost es un sistema de gestión de contenidos CMS de código abierto. Las versiones anteriores a la...
CVE-2023-40028
CVE-2023-40028 POC for CVE-2023-40028: Ghost CMS Arbitrary File Read Description Ghost is an open source content management system. Versions prior to 5.59.1 are subject to a vulnerability which allows authenticated users to upload files that are symlinks. This can be exploited to perform an...
CVE-2023-40028
CVE-2023-40028: Explotación de Symlink en Ghost CMS PoC Resumen Este repositorio contiene un script Proof-of-Concept PoC diseñado para demostrar la explotación de CVE-2023-40028 , una vulnerabilidad de Inclusión de Archivos Locales LFI que afecta a Ghost CMS versiones anteriores a la 5.59.1. La...
CVE-2023-40028
CVE-2023-40028 Prueba de Concepto Este repositorio contiene una prueba de concepto POC para CVE-2023-40028, que demuestra una vulnerabilidad en el sistema de gestión de contenidos Ghost donde usuarios autenticados pueden subir enlaces simbólicos, lo que conduce a vulnerabilidades de lectura...
Astra Linux – Vulnerability in Firefox
Uploading files that contain symlinks may have allowed an attacker to trick a user into submitting sensitive data to a malicious website. This vulnerability affects Firefox 115...
CVE-2026-54352 Budibase: Arbitrary file read by workspace-builder via PWA-zip symlink upload
Budibase is an open-source low-code platform. Prior to 3.39.9, POST /api/pwa/process-zip at packages/server/src/api/routes/static.ts:24 accepts a builder-uploaded .zip, extracts it with [email protected] into a temp directory, then for each entry listed in icons.json validates the icon path, open...
CVE-2026-54352
Budibase has a high-severity arcane file-read issue via the PWA ZIP upload endpoint. Prior to 3.39.9, a workspace-builder could upload a ZIP containing a symlink to a root-available file (for example, /data/.env or /etc/shadow) and, because extract-zip preserves absolute targets and the icon vali...
CVE-2026-54352 Budibase: Arbitrary file read by workspace-builder via PWA-zip symlink upload
Budibase is an open-source low-code platform. Prior to 3.39.9, POST /api/pwa/process-zip at packages/server/src/api/routes/static.ts:24 accepts a builder-uploaded .zip, extracts it with [email protected] into a temp directory, then for each entry listed in icons.json validates the icon path, open...
CVE-2026-2490 RustDesk Client for Windows Transfer File Link Following Information Disclosure Vulnerability
RustDesk Client for Windows Transfer File Link Following Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of RustDesk Client for Windows. An attacker must first obtain the ability to execute low-privileged...
📄 Ghost CMS 5.59.1 Arbitrary File Read
Ghost CMS version 5.59.1 proof of concept arbitrary file read exploit. !/usr/bin/env python3 -- coding: utf-8 -- """ Exploit Title: Ghost CMS 5.59.1 - Arbitrary File Read Date: 2023-09-20 Exploit Author: ibrahimsql https://github.com/ibrahmsql Vendor Homepage: https://ghost.org Software Link:...
Ghost CMS 5.59.1 - Arbitrary File Read
!/usr/bin/env python3 -- coding: utf-8 -- """ Exploit Title: Ghost CMS 5.59.1 - Arbitrary File Read Date: 2023-09-20 Exploit Author: ibrahimsql https://github.com/ibrahmsql Vendor Homepage: https://ghost.org Software Link: https://github.com/TryGhost/Ghost Version: =2.28.1, zipfile, tempfile Usag...
Ghost CMS 5.59.1 Arbitrary File Read
Ghost CMS version 5.59.1 proof of concept arbitrary file reading exploit. ============================================================================================================================================= | Title : Ghost CMS v 5.59.1 PHP Code Injection Vulnerability | | Author :...
Exploit for Path Traversal in Ghost
CVE-2023-40028: Ghost CMS Arbitrary File Read Description...
Exploit for CVE-2024-50404
CVE-2024-50404 - https://www.qnap.com/en/security-advisory/qsa...