CVE-2026-22200

CVE-2026-22200: osTicket PDF File Read + CNEXT RCE Proof of concept exploit for osTicket CVE-2026-22200 which abuses PHP filters to exfiltrate files through the mPDF library and can be chained to RCE via CVE-2024-2961 CNEXT. Blog Post Deep-dive here: Horizon3.ai - Ticket to Shell: Exploiting PHP...

cnext-exploits

CNEXT 漏洞利用工具 针对 CNEXT（CVE-2024-2961）的漏洞利用工具，这是 glibc 的 iconv 中的一个缓冲区溢出漏洞，作者 @cfreal 使用方法 root@kitploit: $ git clone --recurse-submodules https://github.com/ambionics/cnext-exploits.git $ pip install -r requirements.txt 技术分析 漏洞及利用方法在以下博客文章中描述： Iconv, set the charset to RCE: Exploiting the glibc to...

cve-2024-2961

cve-2024-2961 Custom version of https://sansec.io/downloads/cve-2024-2961.c Credit: https://github.com/ambionics/cnext-exploits https://github.com/absolutedesignltd/iconvfix...

CVE-2024-2961-XXE-Exploit

CVE-2024-2961 CNEXT XXE 通道适配利用脚本 将 Ambionics 官方 cnext-exploits 的 PHP 文件读取 - RCE 利用脚本，适配到 SVG 上传 + XXE 任意文件读取 场景（PolarisCTF 2026 "头像上传器" 一类题目）。 前置条件 目标：Linux + glibc 更新 avatarname - 请求解析接口回显。 2. 过滤器分隔符| - ：XML 实体 URL 中含 时 libxml 解析失败（实测 DOMDocument 返回空文档）； 支持不带前缀的裸过滤器按 分隔，等价于 。...

Alert: Adobe Commerce and Magento Stores Under Attack from CosmicSting Exploit

Cybersecurity researchers have disclosed that 5% of all Adobe Commerce and Magento stores have been hacked by malicious actors by exploiting a security vulnerability dubbed CosmicSting. Tracked as CVE-2024-34102 CVSS score: 9.8, the critical flaw relates to an improper restriction of XML external...

Exploit for CVE-2024-2961

CNEXT exploits Exploits for CNEXT CVE-2024-2961, a buffer o...