CVE-2026-22200

CVE-2026-22200: Чтение файлов через PDF в osTicket + RCE через CNEXT Эксплойт proof of concept для osTicket CVE-2026-22200, который использует PHP-фильтры для выгрузки файлов через библиотеку mPDF и может быть объединён в RCE через CVE-2024-2961 CNEXT. Сообщение в блоге Подробности здесь:...

cnext-exploits

CNEXT 익스플로잇 CNEXTCVE-2024-2961용 익스플로잇, glibc의 iconv의 버퍼 오버플로우, @cfreal 작성 사용법 root@kitploit: $ git clone --recurse-submodules https://github.com/ambionics/cnext-exploits.git $ pip install -r requirements.txt 기술 분석 취약점과 익스플로잇은 다음 블로그 게시물에 설명되어 있습니다: Iconv, 문자셋을 RCE로 설정: PHP 엔진을 해킹하기 위해 glibc 익스플로잇...

Alert: Adobe Commerce and Magento Stores Under Attack from CosmicSting Exploit

Cybersecurity researchers have disclosed that 5% of all Adobe Commerce and Magento stores have been hacked by malicious actors by exploiting a security vulnerability dubbed CosmicSting. Tracked as CVE-2024-34102 CVSS score: 9.8, the critical flaw relates to an improper restriction of XML external...

Exploit for CVE-2024-2961

CNEXT exploits Exploits for CNEXT CVE-2024-2961, a buffer o...