CVE-2023-40028 affects Ghost, an open source content management system, where versions prior to 5.59.1 allow authenticated users to upload files that are symlinks. This can be exploited to perform an arbitrary file read of any file on the host operating system.
☆13Jan 7, 2025Updated last year
Alternatives and similar repositories for Ghost-5.58-Arbitrary-File-Read-CVE-2023-40028
Users that are interested in Ghost-5.58-Arbitrary-File-Read-CVE-2023-40028 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Hashicorp Consul - RCE via Services API☆14Oct 18, 2022Updated 4 years ago
- ☆15Mar 23, 2024Updated 2 years ago
- CVE-2023-46818 IPSConfig Python exploit☆18Oct 8, 2024Updated 2 years ago
- File upload logic flaw in Apache Struts2 exploit☆17Jan 3, 2025Updated last year
- LimeSurvey Authenticated RCE☆26Jul 16, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Socat compiled as static binary☆12Feb 12, 2017Updated 9 years ago
- Bridge the gap between your Markdown notes and your SysReptor report findings☆16Jul 3, 2025Updated last year
- NixOS configurations☆12Nov 11, 2024Updated last year
- Local File Inclusion (LFI) scanner.☆12Aug 31, 2022Updated 4 years ago
- ☆15Apr 24, 2024Updated 2 years ago
- Yet another Werkzeug Console Pin Exploit Explanation☆23Jul 30, 2021Updated 5 years ago
- POC for CVE-2020-9484☆13Feb 10, 2021Updated 5 years ago
- A collection of writeups for CTF challenges I've solved☆16Feb 20, 2026Updated 8 months ago
- Testing POC for use cases☆26Nov 24, 2024Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Python script to execute commands via Erlang/OTP Distribution Protocol☆15Feb 6, 2024Updated 2 years ago
- Bypassing SSL Pinning in a Flutter Android Application☆11May 29, 2024Updated 2 years ago
- A tool for mapping cypher databases☆17Jan 20, 2026Updated 9 months ago
- Python script that converts Grafana hash digests to PBKDF2_HMAC_SHA256 format in order to facilitate password cracking using Hashcat.☆33Oct 24, 2021Updated 5 years ago
- Tools for playing with Entrust IdentityGuard soft tokens, such as decrypting QR codes and deriving OTP secrets☆49Jan 13, 2023Updated 3 years ago
- Meant to serve as a simple template CI/CD system using GameCI for Unity games using GitHub Actions.☆22Jan 31, 2026Updated 9 months ago
- AVS is a static application security testing (SAST) tool for detecting common and high-impact vulnerabilities in Android applications.☆23Jan 8, 2026Updated 9 months ago
- A collection of crypto algorithms.☆10Sep 3, 2023Updated 3 years ago
- Compiled UACME☆12Jul 2, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- splunksecrets is a tool for working with Splunk secrets offline☆81Jun 5, 2025Updated last year
- gdb cheat sheet☆25Dec 22, 2020Updated 5 years ago
- Labs built in docker to cover NSE lessons☆14Sep 23, 2026Updated last month
- gemastik-xvii-final public repository☆22Oct 24, 2024Updated 2 years ago
- Pentesting Apache Tomcat 101☆14Apr 4, 2023Updated 3 years ago
- Automatically parse Malleable C2 profiled into CrossC2 rebinding library source code☆20Feb 13, 2023Updated 3 years ago
- Paint Your Tmux Colorful 🧑🎨🎨☆26Aug 5, 2025Updated last year
- ☆11Apr 17, 2025Updated last year
- Auto Move Your Cursor to the Focused Window while You Alt-Tab or Touchboard for Windows☆10Dec 11, 2024Updated last year
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- CBC Bit-Flipping Attack Example with Python☆13Jun 14, 2023Updated 3 years ago
- Windows AppResolver LPE PoC with a filtered-admin-to-SYSTEM demonstration☆15Jul 17, 2026Updated 3 months ago
- Libro de ejercicios de introducción a las redes neuronales☆21Jul 13, 2026Updated 3 months ago
- CVE's we discovered along the way☆17Oct 18, 2021Updated 5 years ago
- Grab DPAPI-protected Wifi Passwords☆11Jun 28, 2021Updated 5 years ago
- ☆22Mar 15, 2024Updated 2 years ago
- PowerShell port of GreenPlasma Admin -> System escalation☆12May 14, 2026Updated 5 months ago