24 matches found
CVE-2024-34102
此存储库没有 README。...
CVE-2024-34102
此存储库没有 README。...
CVE-2024-34102
此存储库没有 README。...
CVE-2024-34102
CVE-2024-34102: 未经过身份验证的 Magento XXE CVEHunter 工具用于 CVE-2024-34102 漏洞检测与利用，具备异步性能。 安装 root@kitploit: git clone https://github.com/th3gokul/CVE-2024-34102.git cd CVE-2024-34102 pip install -r requirements.txt python3 cvehunter.py --help 使用 root@kitploit: python3 cvehunter.py -h / |\ \ / /| || | | ...
magento-cve-2024-34102-exploit-cosmicstring
CVE 2024-34102 - CosmicSting XXE 漏洞影响 Adobe Commerce 与 Magento - 教育材料 本仓库包含关于 Adobe Commerce 和 Magento 最新 XML 外部实体 XXE 漏洞 的演讲幻灯片及演示材料。这些材料仅用于教育目的，旨在帮助开发者、安全专业人员及电子商务相关方了解该漏洞、其潜在影响及如何防范。 内容 幻灯片 ：漏洞概述及其工作原理 XXE 演示 ：展示 XXE 的一般工作方式 利用演示 ：展示该漏洞如何被利用 免责声明 本材料仅供 教育目的 使用。对于因使用或滥用此处提供的信息而造成的任何损害，我 不承担任何责任...
TestCVE-2024-34102
此存储库没有 README。...
CVE-2024-34102
CVE-2024-34102 用法 root@kitploit: python3 CVE-2024-34102.py -h optional arguments: -h, --help show this help message and exit -u URL, --url URL Target URL -ip IP, --ip IP Your IP address -p PORT, --port PORT Port for HTTP server -f FILE, --file FILE Path to the file to be included in the POC...
magento2-encryption-key-manager-cli
CLI de Administrador de Claves de Cifrado de Magento 2 Una utilidad para la rotación y gestión de claves de cifrado de Magento 2. Las víctimas de CVE-2024-34102 también conocido como Cosmic Sting pueden utilizarla como medida de seguimiento posterior. Diseñado para Uso en desarrollo Automatizació...
Magento / Adobe Commerce Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'CosmicSting: Magento Arbitrary File Read CVE-2024-34102 + PHP Buffer Overflow in the iconv function of glibc CVE-2024-2961', 'Description' = %q...
Alert: Adobe Commerce and Magento Stores Under Attack from CosmicSting Exploit
Cybersecurity researchers have disclosed that 5% of all Adobe Commerce and Magento stores have been hacked by malicious actors by exploiting a security vulnerability dubbed CosmicSting. Tracked as CVE-2024-34102 CVSS score: 9.8, the critical flaw relates to an improper restriction of XML external...
Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce
CVE-2024-34102 ★ Thanks to @th3gokul, Sanjaith3hacker, Chocapi...
Metasploit Weekly Wrap-Up 07/26/2024
New module content 3 Magento XXE Unserialize Arbitrary File Read Authors: Heyder and Sergey Temnikov Type: Auxiliary Pull request: 19304 contributed by heyder Path: gather/magentoxxecve202434102 AttackerKB reference: CVE-2024-34102 Description: This adds an auxiliary module for an XXE which resul...
Cisco Warns of Critical Flaw Affecting On-Prem Smart Software Manager
Cisco has released patches to address a maximum-severity security flaw impacting Smart Software Manager On-Prem Cisco SSM On-Prem that could enable a remote, unauthenticated attacker to change the password of any users, including those belonging to administrative users. The vulnerability, tracked...
Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce
Cosmic Sting: CVE-2024-34102 Exploiter Cosmic Sting is a Go-b...
Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce
A Cosmicsting POC...
Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce
CosmicSting: critical unauthenticated XXE vulnerability in Ado...
Vulnerabilities fixed in Adobe Commerce
Adobe has fixed vulnerabilities in Commerce and Magento. A malicious party could exploit the vulnerabilities to bypass security measures and execute arbitrary code, possibly with administrator privileges. Proof-of-Concept code PoC has been published for the vulnerability with reference...
Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce
CVE-2024-34102 Usage bash python3 CVE-2024-34102.py...