CVE-2023-27163-InternalProber

CVE-2023-27163-InternalProber CVE-2023-27163-InternalProber è un potente strumento progettato per aiutarti a creare un request basket ed eseguire scansioni delle porte. Automatizza la creazione di un nuovo basket e quindi modifica la configurazione per ciascuna porta per eseguire la scansione del...

CVE-2023-27163

Proof Of Concept von SSRF auf Request-Baskets CVE-2023-27163 Dieses Repository enthält einen Proof-of-Concept PoC für CVE-2023-27163, eine Server-Side Request Forgery SSRF Schwachstelle, die in request-baskets bis Version 1.2.1 entdeckt wurde. Diese Schwachstelle ermöglicht es Angreifern, auf...

basketcraft

basketcraft questo è uno script che sfrutta la vulnerabilità CVE-2023-27163 che è un SSRF in request-baskets versione 1.2.1 SSRF su Request-Baskets CVE-2023–27163 CVE-2023–27163 rappresenta una vulnerabilità critica di Server-Side Request Forgery SSRF che è stata identificata in Request-Baskets,...

CVE-2023-27163-exploit

CVE-2023-27163 — request-baskets SSRF Exploit Ho scritto questo exploit per colpire CVE-2023-27163 , una vulnerabilità di Server-Side Request Forgery SSRF presente in request-baskets versioni ≤ 1.2.1. Il difetto risiede nell'endpoint /api/baskets/name, dove il parametro forwardurl consente a un...

Exploit_CVE-2023-27163

CVE-2023-27163 Codice Exploit PoC Questo script Python è una Proof of Concept PoC per CVE-2023-27163 , una vulnerabilità di Server-Side Request Forgery SSRF in Request Basket. Descrizione del Codice Lo script automatizza lo sfruttamento di CVE-2023-27163. Esegue le seguenti azioni: 1. Genera un...

CVE-2023-27163

CVE-2023-27163 Implementazione Python di CVE-2023-27163 Installazione Per installare le dipendenze del progetto, segui questi passaggi: 1. Clona il repository: root@kitploit: git clone https://github.com/yourusername/yourrepository.git 2. Entra nella directory del progetto: root@kitploit: cd...

CVE-2023-27163

Preuve de concept PoC de SSRF sur Request-Baskets CVE-2023-27163 Ce dépôt contient une preuve de concept PoC pour CVE-2023-27163, une vulnérabilité de Server-Side Request Forgery SSRF découverte dans request-baskets jusqu'à la version 1.2.1. Cette vulnérabilité permet aux attaquants d'accéder à d...

cve-2023-27163

Danke an @beet1ehttps://github.com/b33t1e von der Shanghai Jiao Tong Universität und @chenlibo147 , @houqinsheng, [email protected] von der Shandong Universität. Bitte lesen Sie https://notes.sjtu.edu.cn/s/MUUhEymt7 für ausführliche Informationen über die SSRF-Sicherheitslücke CVE-2023-27163...

CVE-2026-9726

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal AlternativeCommerce Basket allows Object Injection. This issue affects Drupal AlternativeCommerce Basket versions: from 0.0.0 to 2.1.17...

CVE-2026-9726 Drupal AlternativeCommerce (Basket) - Highly critical - Arbitrary PHP code execution - SA-CONTRIB-2026-038

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal AlternativeCommerce Basket allows Object Injection. This issue affects Drupal AlternativeCommerce Basket versions: from 0.0.0 to 2.1.17...

EUVD-2026-43042

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal AlternativeCommerce Basket allows Object Injection. This issue affects Drupal AlternativeCommerce Basket versions: from 0.0.0 to 2.1.17...

CVE-2026-9726 Drupal AlternativeCommerce (Basket) - Highly critical - Arbitrary PHP code execution - SA-CONTRIB-2026-038

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal AlternativeCommerce Basket allows Object Injection. This issue affects Drupal AlternativeCommerce Basket versions: from 0.0.0 to 2.1.17...

CVE-2026-9726

The Basket module for Drupal (AlternativeCommerce) is affected by CVE-2026-9726. The vulnerability arises from insufficient sanitization before PHP unserialize(), enabling PHP Object Injection. Affected versions are 0.0.0 through 2.1.17. If a gadget chain exists in site code or dependencies, this...

MAL-2026-7341 Malicious code in picnic-store-basket-miniapp (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7053 Malicious code in @bmg-web/bmg-review-basket (npm)

--- -= Per source details. Do not edit below this line.=-...

DRUPAL-CONTRIB-2026-038

The Basket module enables e-commerce and checkout functionality for Drupal sites. The module does not sufficiently sanitize user-supplied data before passing it to PHP's unserialize. An attacker can supply a crafted payload and trigger PHP Object Injection. If a viable gadget chain exists in the...

PT-2026-44164

Name of the Vulnerable Software and Affected Versions Basket versions prior to 2.1.17 Description The Basket module, which provides e-commerce and checkout functionality for Drupal sites, fails to sufficiently sanitize user-supplied data before it is processed by the PHP unserialize function. Thi...

Drupal AlternativeCommerce (Basket) - Highly critical - Arbitrary PHP code execution - SA-CONTRIB-2026-038

The Basket module enables e-commerce and checkout functionality for Drupal sites. The module does not sufficiently sanitize user-supplied data before passing it to PHP's unserialize. An attacker can supply a crafted payload and trigger PHP Object Injection. If a viable gadget chain exists in the...

CVE-2024-36058

The Send Basket functionality in Koha Library before 23.05.10 is susceptible to Time-Based SQL Injection because it fails to sanitize the POST parameter biblist in /cgi-bin/koha/opac-sendbasket.pl, allowing library users to read arbitrary data from the database...

EUVD-2024-55539

The Send Basket functionality in Koha Library before 23.05.10 is susceptible to Time-Based SQL Injection because it fails to sanitize the POST parameter biblist in /cgi-bin/koha/opac-sendbasket.pl, allowing library users to read arbitrary data from the database...