CVE-2026-26980
vognik/cve-2026-26980Unauthenticated SQL injection exploit for Ghost CMS Content API (CVE-2026-26980); dumps database tables from SQLite/MySQL with active/passive checks…
database-securitydata-exfiltrationexploitation+4
10
vognik/cve-2026-26980Unauthenticated SQL injection exploit for Ghost CMS Content API (CVE-2026-26980); dumps database tables from SQLite/MySQL with active/passive checks…
ahxr/ghostLightweight RAT providing silent remote command-line access, hidden file download/execution, and persistence mechanisms for Windows systems.…
ghost-otpbot/smsotpbotOTP BOT Bypass SMS verifications from Paypal, Instagram, Snapchat, Google, 3D Secure, and many others...
mikesplain/cve-2015-0235-cookbookChef cookbook to test systems for the GHOST vulnerability (CVE-2015-0235) by running a detection binary and checking libc for the flaw.
monke443/cve-2023-40028Arbitrary file read in Ghost-CMS allows an attacker to upload a malicious ZIP file with a symlink.
rvzsec/cve-2023-40028Python-based proof-of-concept exploit for CVE-2023-40028, a symlink upload vulnerability in Ghost CMS enabling authenticated arbitrary file read via…
heavyghost-le/poc_sql_injection_in_parse_server_prior_6.5.7_-_7.1.0Advanced PostgreSQL database enumeration tool exploiting CVE-2024-39309 in Parse Server - Comprehensive SQL injection exploitation for security…
n0bitaemon/cve-2026-26980-pocBlind SQL injection exploit for Ghost CMS (CVE-2026-26980) targeting unauthenticated Content API to extract credentials, API keys, and database…
eqstlab/cve-2026-26980Unauthenticated SQL injection proof-of-concept for Ghost CMS Content API (CVE-2026-26980) with Docker lab and boolean-based database extraction.
wojtekchwala/cve-2025-66849Proof-of-concept exploit for a stored XSS vulnerability in Ghost CMS (CVE-2025-66849) enabling privilege escalation from Contributor to Owner via…
outpost24/pyrescom-termod-pocPyrescom Termod proof-of-concept code for CVE-2020-23160, CVE-2020-23161 and CVE-2020-23162
depthsecurity/relayking-depthActive Directory relay attack detection and enumeration tool. Scans for NTLM relay opportunities, detects CVE-2025-33073, CVE-2025-54918,…
sudlit/cve-2023-40028Proof-of-concept exploit for CVE-2023-40028, demonstrating arbitrary file read in Ghost CMS via improper file handling. For educational and…
syogod/cve-2023-40028Proof-of-concept script demonstrating CVE-2023-40028 Local File Inclusion in Ghost CMS via symlink file upload, enabling authenticated attackers to…
rehan6658/cve-2023-40028Python exploit for CVE-2023-40028 in Ghost CMS, enabling arbitrary file read via symlink abuse in ZIP uploads. Includes automated cleanup.
skylightcyber/cve-2023-28810Unauthenticated configuration changer, password brute-forcer, and SIP ghost caller for Hikvision intercom devices exploiting CVE-2023-28810.
makelinux/cve-2015-0235-workaroundA shared library wrapper with additional checks for vulnerable functions gethostbyname2_r gethostbyname_r (GHOST vulnerability)
tobyzxj/cve-2015-0235Proof-of-concept exploit for CVE-2015-0235 (Ghost), a critical glibc gethostbyname buffer overflow vulnerability enabling remote code execution.