CVE-2022-24086

CVE-2022-24086 Magento RCE について 説明 Adobe Commerce バージョン 2.4.3-p1（およびそれ以前）と 2.3.7-p2（およびそれ以前）は、チェックアウト処理中に不適切な入力検証の脆弱性の影響を受けます。この問題の悪用にはユーザーの操作は不要で、任意のコード実行につながる可能性があります。 POC 注意: これは本当のPOCではありません ... POC var this.getTemplateFilter.addAfterFilterCallback"system".filter"whoami"...

magento2-cosmic-sting-patch

Magento 2 Patch for CVE-2024-34102（通称 Cosmic Sting） XXE 脆弱性 CVE-2024-34102（通称 Cosmic Sting）を修正するための代替ソリューション（Magento 2 拡張機能として）。Magento をアップグレードできない場合や公式パッチを適用できない場合は、こちらをお試しください。 この脆弱性を修正しないと、攻撃者が RCE を実行する可能性があります。すでに実際の攻撃を確認しています。 CVE-2024-34102 の影響を受ける Magento バージョン（2.3 以降） 2.3.0 ～ 2.4.4-p8...

CVE-2022-24086-RCE

CVE-2022-24086-RCE CVE-2022-24086 RCE 説明 Adobe Commerce バージョン 2.4.3-p1（およびそれ以前）および 2.3.7-p2（およびそれ以前）は、チェックアウト処理中に不適切な入力検証の脆弱性の影響を受けます。この問題の悪用にはユーザー操作は不要で、任意のコード実行につながる可能性があります。 POC RCE...

CVE-2022-24086

CVE-2022-24086 CVE-2022-24086 POC 例 提供元: BurpRoot CVE-2022-24086: 概要 影響を受けるソフトウェア: Magento2 CVE ID: CVE-2022-24086 CVSS スコア: 9.8 Critical 説明 CVE-2022-24086 は、Magento2 eコマースプラットフォームの複数のバージョンに影響を与える深刻なセキュリティ脆弱性です。この脆弱性により、認証されていない攻撃者がサーバー上で任意のコードを実行し、機密データへの不正アクセスや、影響を受けるシステムの制御を奪取する可能性があります。...

PT-2026-73069

A weakness has been identified in code-projects Online Shopping System 1.0. This affects an unknown part of the file /checkout process.php. Executing a manipulation of the argument total count can lead to sql injection. The attack can be launched remotely. The exploit has been made available to t...

CVE-2026-15045 Wallet System for WooCommerce < 2.7.10 - Customer+ Checkout Price Manipulation via Unvalidated Wallet Amount

The Wallet System for WooCommerce WordPress plugin before 2.7.10 does not validate a user-supplied wallet amount against the customer's actual stored balance during checkout, allowing authenticated customers to arbitrarily reduce their own order total, including down to zero, and complete checkou...

Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key through improper handling of URL query parameters in the Checkout process. An attacker can override administrator-defined server provisioning parameters by injecting arbitrary key-value...

CVE-2026-4949

The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 4.16.12. This is due to the 'processcheckout' function not properly enforcing...

CVE-2026-44471

gitoxide is an implementation of git written in Rust. Prior to 0.21.1, a malicious tree can be constructed that will, when checked out with gitoxide, permit writing an attacker-controlled symlink into any existing directory the user has write access to. During checkout, all symlink index entries...

CVE-2026-47741 Shopper: Race condition on Discount.usage_limit allows silent over-redemption

Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, CreateOrderFromCartAction::execute previously created the Order row before checking and incrementing the discount's totaluse counter. Under concurrent checkout pressure Black Friday, flash sale, viral coupon, the global usagelimit was...

gitoxide 后置链接漏洞

GitOxide is a Git implementation written in Rust by Sebastian Thiel. Versions of GitOxide prior to 0.21.1 had a backlink vulnerability. This vulnerability stemmed from defects in the handling of symbolic link entries during the checkout process, which could allow attackers to create malicious tre...

CVE-2026-3445

The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to unauthorized membership payment bypass in all versions up to, and including, 4.16.11. This is due to a missing ownership verification on...

EUVD-2026-18997

The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 4.16.11. This is due to the plugin allowing user-supplied billing fie...

CVE-2026-3309

The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 4.16.11. This is due to the plugin allowing user-supplied billing fie...

EUVD-2026-11073

The ProfilePress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.16.11. This is due to missing ownership validation on the changeplansubid parameter in the processcheckout function. The ppressprocesscheckout AJAX handler accepts a...

Sylius 跨站脚本漏洞

Sylius is an open-source e-commerce platform developed by the Polish company Sylius, based on the Symfony framework. Sylius has a cross-site scripting vulnerability. This vulnerability arises from the use of the innerHTML method to render the message field in the login form during checkout, which...

PT-2025-54390

Missing Authorization vulnerability in Fahad Mahmood Easy Upload Files During Checkout allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Upload Files During Checkout: from n/a through 3.0.0...

EUVD-2021-22663

Malware in sbrugna...

Shopware 6.6.10.4 Race Condition

A race condition exists within the voucher system of the Shopware Core. Successful exploitation of this vulnerability allows an attacker to bypass voucher usage limits during the checkout process. This vulnerability exists due to the fact that validation of voucher codes is not an atomic operatio...

Race Condition

Overview shopware/shopware is an open source e-commerce software made in Germany Affected versions of this package are vulnerable to Race Condition due to the checkout process. An attacker can bypass intended restrictions and redeem vouchers beyond their allowed usage by exploiting timing...