137 matches found
CVE-2023-27163-InternalProber
CVE-2023-27163-InternalProber CVE-2023-27163-InternalProber is a powerful tool designed to help you to create a request basket and perform port scanning. It automates the creation of new basket and then change the configuration for each port to perform port scanning on the internal IP address. By...
CVE-2023-27163
Proof Of Concept of SSRF on Request-Baskets CVE-2023-27163 This repository contains a Proof-of-Concept PoC for CVE-2023-27163, a Server-Side Request Forgery SSRF vulnerability discovered in request-baskets up to version 1.2.1. This vulnerability allows attackers to access network resources and...
Exploit_CVE-2023-27163
CVE-2023-27163 PoC Exploit Code This Python script is a Proof of Concept PoC for CVE-2023-27163 , a Server-Side Request Forgery SSRF vulnerability in Request Basket. Code Description The script automates the exploitation of CVE-2023-27163. It performs the following actions: 1. Generates a random...
CVE-2023-27163
PoC of SSRF on Request-Baskets CVE-2023-27163 This repository contains a Proof-of-Concept PoC for CVE-2023-27163, a Server-Side Request Forgery SSRF vulnerability discovered in request-baskets up to version 1.2.1. This vulnerability allows attackers to access network resources and sensitive...
cve-2023-27163
Thank you to @beet1ehttps://github.com/b33t1e from Shanghai Jiao Tong University and @chenlibo147 , @houqinsheng, [email protected] from Shandong University. Please review https://notes.sjtu.edu.cn/s/MUUhEymt7 for indepth information about the SSRF vulnerability CVE-2023-27163. This code is...
CVE-2023-27163-exploit
CVE-2023-27163 — request-baskets SSRF Exploit I wrote this exploit to target CVE-2023-27163 , a Server-Side Request Forgery SSRF vulnerability found in request-baskets versions ≤ 1.2.1. The flaw lives in the /api/baskets/name endpoint, where the forwardurl parameter allows an attacker to make the...
CVE-2023-27163
CVE-2023-27163 Python implementation of CVE-2023-27163 Installation To install the project dependencies, follow these steps: 1. Clone the repository: git clone https://github.com/yourusername/yourrepository.git 2. Navigate into the project directory: cd yourrepository 3. Install the dependencies...
basketcraft
basketcraft este es un script que explota la vulnerabilidad CVE-2023-27163, que es un SSRF en request-baskets versión 1.2.1 SSRF en Request-Baskets CVE-2023–27163 CVE-2023–27163 representa una vulnerabilidad crítica de falsificación de solicitudes del lado del servidor Server-Side Request Forgery...
Exploit for CVE-2024-36058
CVE-2024-36058 — Koha Library Software CVE ID: CVE-2024-3...
Malicious code in picnic-store-basket-miniapp (npm)
--- Credit: OpenSSF source...
Malicious code in @bmg-web/bmg-review-basket (npm)
--- Credit: OpenSSF source...
CVE-2026-9726
Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal AlternativeCommerce Basket allows Object Injection. This issue affects Drupal AlternativeCommerce Basket versions: from 0.0.0 to 2.1.17...
CVE-2026-9726
The Drupal AlternativeCommerce (Basket) module is vulnerable to PHP Object Injection due to the insufficient sanitization of user-supplied data before it is passed to the PHP unserialize() function. This vulnerability affects versions 0.0.0 through 2.1.17 . An attacker can provide a crafted paylo...
CVE-2026-9726 Drupal AlternativeCommerce (Basket) - Highly critical - Arbitrary PHP code execution - SA-CONTRIB-2026-038
Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal AlternativeCommerce Basket allows Object Injection. This issue affects Drupal AlternativeCommerce Basket versions: from 0.0.0 to 2.1.17...
EUVD-2026-43042
Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal AlternativeCommerce Basket allows Object Injection. This issue affects Drupal AlternativeCommerce Basket versions: from 0.0.0 to 2.1.17...
CVE-2026-9726 Drupal AlternativeCommerce (Basket) - Highly critical - Arbitrary PHP code execution - SA-CONTRIB-2026-038
Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal AlternativeCommerce Basket allows Object Injection. This issue affects Drupal AlternativeCommerce Basket versions: from 0.0.0 to 2.1.17...
CVE-2026-9726: Improperly Controlled Modification of Dynamically-Determined Object Attributes
Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal AlternativeCommerce Basket allows Object Injection. This issue affects Drupal AlternativeCommerce Basket versions: from 0.0.0 to 2.1.17...
MAL-2026-7341 Malicious code in picnic-store-basket-miniapp (npm)
--- -= Per source details. Do not edit below this line.=-...
