24 matches found
magento2-encryption-key-manager-cli
Magento 2 CLI для управления ключами шифрования Утилита для ротации и управления ключами шифрования в Magento 2. Жертвы CVE-2024-34102 также известной как Cosmic Sting могут использовать её в качестве последующего обслуживания. Предназначено для Разработка Автоматизация развертывания Последующее...
CVE-2024-34102
CVE-2024-34102...
CVE-2024-34102
В этом репозитории нет README...
CVE-2024-34102
CVE-2024-34102: Неаутентифицированная XXE-уязвимость Magento Инструмент CVEHunter для обнаружения уязвимостей и эксплуатации CVE-2024-34102 с асинхронной производительностью. Установка git clone https://github.com/th3gokul/CVE-2024-34102.git cd CVE-2024-34102 pip install -r requirements.txt pytho...
CVE-2024-34102
Ce depot n’a pas de fichier README...
magento-cve-2024-34102-exploit-cosmicstring
CVE 2024-34102 - CosmicSting: XXE-уязвимость в Adobe Commerce и Magento - Учебный материал Этот репозиторий содержит слайды и демонстрационные материалы для моего доклада о последней уязвимости XML External Entity XXE в Adobe Commerce и Magento. Цель этих материалов — исключительно образовательна...
CVE-2024-34102
CVE-2024-34102 Utilisation python3 CVE-2024-34102.py -h optional arguments: -h, --help show this help message and exit -u URL, --url URL Target URL -ip IP, --ip IP Your IP address -p PORT, --port PORT Port for HTTP server -f FILE, --file FILE Path to the file to be included in the POC...
TestCVE-2024-34102
В этом репозитории нет README...
Magento / Adobe Commerce Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'CosmicSting: Magento Arbitrary File Read CVE-2024-34102 + PHP Buffer Overflow in the iconv function of glibc CVE-2024-2961', 'Description' = %q...
Alert: Adobe Commerce and Magento Stores Under Attack from CosmicSting Exploit
Cybersecurity researchers have disclosed that 5% of all Adobe Commerce and Magento stores have been hacked by malicious actors by exploiting a security vulnerability dubbed CosmicSting. Tracked as CVE-2024-34102 CVSS score: 9.8, the critical flaw relates to an improper restriction of XML external...
Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce
CVE-2024-34102 ★ Thanks to @th3gokul, Sanjaith3hacker, Chocapi...
Metasploit Weekly Wrap-Up 07/26/2024
New module content 3 Magento XXE Unserialize Arbitrary File Read Authors: Heyder and Sergey Temnikov Type: Auxiliary Pull request: 19304 contributed by heyder Path: gather/magentoxxecve202434102 AttackerKB reference: CVE-2024-34102 Description: This adds an auxiliary module for an XXE which resul...
Cisco Warns of Critical Flaw Affecting On-Prem Smart Software Manager
Cisco has released patches to address a maximum-severity security flaw impacting Smart Software Manager On-Prem Cisco SSM On-Prem that could enable a remote, unauthenticated attacker to change the password of any users, including those belonging to administrative users. The vulnerability, tracked...
Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce
Cosmic Sting: CVE-2024-34102 Exploiter Cosmic Sting is a Go-b...
Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce
A Cosmicsting POC...
Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce
CosmicSting: critical unauthenticated XXE vulnerability in Ado...
Vulnerabilities fixed in Adobe Commerce
Adobe has fixed vulnerabilities in Commerce and Magento. A malicious party could exploit the vulnerabilities to bypass security measures and execute arbitrary code, possibly with administrator privileges. Proof-of-Concept code PoC has been published for the vulnerability with reference...
Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce
CVE-2024-34102 Usage bash python3 CVE-2024-34102.py...