CVE-2022-24086

CVE-2022-24086 Magento RCE について 説明 Adobe Commerce バージョン 2.4.3-p1（およびそれ以前）と 2.3.7-p2（およびそれ以前）は、チェックアウト処理中に不適切な入力検証の脆弱性の影響を受けます。この問題の悪用にはユーザーの操作は不要で、任意のコード実行につながる可能性があります。 POC 注意: これは本当のPOCではありません ... POC var this.getTemplateFilter.addAfterFilterCallback"system".filter"whoami"...

CVE-2022-24086-RCE

CVE-2022-24086-RCE CVE-2022-24086 RCE 描述 Adobe Commerce 版本 2.4.3-p1（及更早版本）和 2.3.7-p2（及更早版本）在结账过程中存在不当的输入验证漏洞。利用此问题无需用户交互，可能导致任意代码执行。 POC RCE...

CVE-2025-48384

CVE-2025-48384 PoC 注意事项 本仓库是为安全教育目的而创建的。 请勿滥用。 该漏洞需要在目录名中包含\r，因此 Linux/Unix系操作系统受到影响。 以下是受影响的 Git 版本： v2.43.x系列 - 低于 v2.43.7 v2.44.x系列 - 低于 v2.44.4 v2.45.x系列 - 低于 v2.45.4 v2.46.x系列 - 低于 v2.46.4 v2.47.x系列 - 低于 v2.47.3 v2.48.x系列 - 低于 v2.48.2 v2.49.x系列 - 低于 v2.49.1 v2.50.x系列 - 低于 v2.50.1 Remote 验证用...

CVE-mitre

CVE-Mitre Общий перечень уязвимостей CVE Скачать отдельный CVE Переменная приведена только в качестве примера ; вы можете создать свой собственный SVN-скрипт для загрузки отдельной папки = CVE = С уважением, @nu11secur1ty $CVE = CVE-2020-13935 root@kitploit: svn checkout...

CVE-2024-32002-Exploit

root@kitploit: !/bin/bash git init hook cd hook mkdir -p y/hooks cat y/hooks/post-checkout dotgit.txt git hash-object -w --stdin dot-git.hash printf "120000 %s 0\ta\n" "$cat dot-git.hash" index.info git update-index --index-info index.info git commit -m "adicionar link simbólico" git remote add...

CVE-2024-32002

CVE-2024-32002 一个简单的概念验证，执行计算器（仅限 macOS 示例）。使用 git clone --recursive 命令时，此仓库还会拉取 https://github.com/markuta/hooky，其中包含一个 post-checkout 脚本。主要基于修复提交 t7406-submodule-update.sh 文件。 运行 注意 ：低于 2.45.1、2.44.1、2.43.4、2.42.2、2.41.1、2.40.2 和 2.39.4 的版本均受影响。...

CVE-2025-68001

CVE-2025-68001 Il plugin WordPress g-FFL Checkout 📡 Resta un passo avanti. Unisciti a @KNxploited su Telegram — la tua fonte esclusiva per le ultime CVE, zero-day e ricerca exploit all'avanguardia. Aggiornato costantemente. Non per tutti. 📋 Panoramica...

CVE-2024-32002-EXP

CVE-2024-32002-EXP root@kitploit: !/bin/bash Git-Konfigurationsoptionen setzen git config --global protocol.file.allow always git config --global core.symlinks true Warnmeldungen vermeiden Standard-Branch auf main setzen git config --global init.defaultBranch main Tell-tale-Pfad definieren...

CVE-2024-32002

GIT RCE CVE-2024-32002 Descrizione | CVE-2024-32002 | https://www.tarlogic.com/blog/cve-2024-32002-vulnerability-git/ | Exploit | Per prima cosa devi creare i repository "calledrepo" e "commandrepo" su git. | La vittima eseguirà successivamente la clonazione di calledrepo con "git clone --recursi...

Vulnerability-Playground-CVE-2025-61922

Vulnerability-Playground-CVE-2025-61922 Este playground simula a vulnerabilidade Customer Checkout no PrestaShop...

cve-2024-32002-submodule-rce

CVE-2024-32002 RCE Submodule Un sottomodulo per dimostrare CVE-2024-32002. Dimostra l'esecuzione remota di codice RCE caricando un hook di commit dannoso nella directory .git del repository principale. Vedi cve-2024-32002-poc-rce per il POC funzionante che utilizza questo repository. Cosa contien...

CVE-2024-50968

CVE-2024-50968 Beschreibung Es besteht eine Schwachstelle in der Geschäftslogik der Funktion "In den Warenkorb" des itsourcecode Agri-Trading Online Shopping System 1.0, die es entfernten Angreifern ermöglicht, den quant-Parameter beim Hinzufügen eines Produkts zum Warenkorb zu manipulieren. Durc...

CVE-2026-52217-VTEX-Checkout-CrossTenant-IDOR

CVE-2026-52217 Autorisierungsschwachstelle zwischen Mandanten und Benutzern IDOR / BOLA im Checkout-Dienst der VTEX Commerce Platform. Feld| Wert ---|--- CVE-ID| CVE-2026-52217 Anbieter| VTEX Produkt| VTEX Commerce Platform, Checkout-Dienst chk Betroffen| Beobachtet auf chk v2.367.3 und...

hook

hook Submodul für gitrce: https://github.com/EQSTSeminar/gitrce Angriffsszenario kali192.168.216.129 --Gibt Remote-Repository-Adresse-- Win192.168.216.130 kali192.168.216.129 --Git clone && Hook-Skriptpost-checkout-Ausführung-- Win192.168.216.130 Haftungsausschluss Dieses Repository ist nicht als...

CVE-2022-24086

CVE-2022-24086 Esempio di POC per CVE-2022-24086 fornito da BurpRoot CVE-2022-24086: Panoramica Software interessato: Magento2 ID CVE: CVE-2022-24086 Punteggio CVSS: 9.8 Critico Descrizione CVE-2022-24086 è una vulnerabilità di sicurezza critica che colpisce diverse versioni della piattaforma...

CVE-2025-48384-submodule

CVE-2025-48384 Submodule Questo submodule contiene un hook post-checkout malevolo a scopo dimostrativo...

CVE-2026-77694

The Eventin WordPress plugin before 4.1.19 does not properly restrict which changes a guest checkout token is allowed to authorise on an order, allowing unauthenticated users to mark their own unpaid order as completed and be issued a valid paid ticket with no payment taken...

CVE-2026-77694 Eventin < 4.1.19 - Unauthenticated Order Completion Without Payment via order_token

The Eventin WordPress plugin before 4.1.19 does not properly restrict which changes a guest checkout token is allowed to authorise on an order, allowing unauthenticated users to mark their own unpaid order as completed and be issued a valid paid ticket with no payment taken...

EUVD-2026-66284

The Eventin WordPress plugin before 4.1.19 does not properly restrict which changes a guest checkout token is allowed to authorise on an order, allowing unauthenticated users to mark their own unpaid order as completed and be issued a valid paid ticket with no payment taken...

Flexible Checkout Fields for WooCommerce <= 2.3.1 - Unauthenticated Arbitrary Plugin Settings Update

The Flexible Checkout Fields for WooCommerce plugin for WordPress is vulnerable to Unauthenticated Arbitrary Plugin Settings update, in addition to Stored Cross-Site Scripting in versions up to, and including, 2.3.1. This is due to missing authorization checks on the updateSettingsAction function...