heavyghost-le/poc_sql_injection_in_parse_server_prior_6.5.7_-_7.1.0Advanced PostgreSQL database enumeration tool exploiting CVE-2024-39309 in Parse Server - Comprehensive SQL injection exploitation for security…
gagaltotal/cve-2026-26980-ghost-cms-apiGo-based PoC for Ghost CMS Content API SQL injection (CVE-2026-26980). Verifies vulnerability, extracts admin credentials and API secrets, and…
0xdtc/ghost-5.58-arbitrary-file-read-cve-2023-40028Automated exploit for Ghost CMS CVE-2023-40028 that authenticates to the admin API, uploads a symlinked ZIP, and reads arbitrary host files from the…
syogod/cve-2023-40028Proof-of-concept script demonstrating CVE-2023-40028 Local File Inclusion in Ghost CMS via symlink file upload, enabling authenticated attackers to…
monke443/cve-2023-40028Arbitrary file read in Ghost-CMS allows an attacker to upload a malicious ZIP file with a symlink.
rvzsec/cve-2023-40028Python-based proof-of-concept exploit for CVE-2023-40028, a symlink upload vulnerability in Ghost CMS enabling authenticated arbitrary file read via…
n0bitaemon/cve-2026-26980-pocBlind SQL injection exploit for Ghost CMS (CVE-2026-26980) targeting unauthenticated Content API to extract credentials, API keys, and database…
godylockz/cve-2023-40028Proof-of-concept exploit for CVE-2023-40028 enabling authenticated arbitrary file read in Ghost CMS via symlink upload. Includes interactive shell…
buutt3rf1y/cve-2023-40028Proof-of-concept exploit for CVE-2023-40028, an arbitrary file read vulnerability in Ghost CMS, allowing authenticated users to read host files via…
vognik/cve-2026-26980Unauthenticated SQL injection exploit for Ghost CMS Content API (CVE-2026-26980); dumps database tables from SQLite/MySQL with active/passive checks…
axroux/ghost-path-traversal-cve-2023-32235-A Directory Traversal attack (also known as path traversal) aims to access files and directories that are stored outside the intended folder.
praetorian-inc/wasmforgeCompile Go and C# programs into WASM-sandboxed native executables with polymorphic output, ghost profiling, and transparent Win32/macOS API bridging…
0xyassine/cve-2023-40028Proof of concept demonstrating authenticated symlink upload in Ghost CMS leading to arbitrary file read via CVE-2023-40028.
eqstlab/cve-2026-26980Unauthenticated SQL injection proof-of-concept for Ghost CMS Content API (CVE-2026-26980) with Docker lab and boolean-based database extraction.
exp-sky/cve-2020-0796Proof-of-concept exploit for CVE-2020-0796 (SMBv3 Ghost) with demonstration video. Enables remote code execution testing against vulnerable Windows…
wojtekchwala/cve-2025-66849Proof-of-concept exploit for a stored XSS vulnerability in Ghost CMS (CVE-2025-66849) enabling privilege escalation from Contributor to Owner via…
stp1t/cve-2023-40028Python exploit for CVE-2023-40028 enabling authenticated arbitrary file read on Ghost CMS, designed for educational use and HTB machines.
gl1tch0x1/ghost-cms-exploitPython script that brute-forces Ghost CMS credentials, then checks for CVE-2024-23724 and generates an SVG exploit payload for confirmed vulnerable…
