CVE-2026-22200

CVE-2026-22200: osTicket PDF File Read + CNEXT RCE Proof of concept exploit for osTicket CVE-2026-22200 which abuses PHP filters to exfiltrate files through the mPDF library and can be chained to RCE via CVE-2024-2961 CNEXT. Blog Post Deep-dive here: Horizon3.ai - Ticket to Shell: Exploiting PHP...

cnext-exploits

CNEXT 漏洞利用工具 针对 CNEXT（CVE-2024-2961）的漏洞利用工具，这是 glibc 的 iconv 中的一个缓冲区溢出漏洞，作者 @cfreal 使用方法 $ git clone --recurse-submodules https://github.com/ambionics/cnext-exploits.git $ pip install -r requirements.txt 技术分析 漏洞及利用方法在以下博客文章中描述： Iconv, set the charset to RCE: Exploiting the glibc to hack the PHP...

cve-2024-2961

cve-2024-2961 Custom version of https://sansec.io/downloads/cve-2024-2961.c Credit: https://github.com/ambionics/cnext-exploits https://github.com/absolutedesignltd/iconvfix...

CVE-2024-2961-XXE-Exploit

CVE-2024-2961 CNEXT Script de adaptación del canal XXE Adapta el script de explotación de lectura de archivos PHP - RCE del cnext-exploits oficial de Ambionics al escenario de subida de SVG + XXE de lectura arbitraria de archivos tipo de reto "subidor de avatares" de PolarisCTF 2026. Requisitos...

Alert: Adobe Commerce and Magento Stores Under Attack from CosmicSting Exploit

Cybersecurity researchers have disclosed that 5% of all Adobe Commerce and Magento stores have been hacked by malicious actors by exploiting a security vulnerability dubbed CosmicSting. Tracked as CVE-2024-34102 CVSS score: 9.8, the critical flaw relates to an improper restriction of XML external...

Exploit for CVE-2024-2961

CNEXT exploits Exploits for CNEXT CVE-2024-2961, a buffer o...