exploit/linux/http/magento_xxe_to_glibc_buf_overflow

weaponized

CosmicSting: Magento Arbitrary File Read (CVE-2024-34102) + PHP Buffer Overflow in the iconv() function of glibc (CVE-2024-2961)

view exploit source metasploittype exploitpublished 2024-07-26catalog metasploit

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2024-34102US	—OT critical	100.0% (100th)	KEV	2024-06-13
Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could re…
CVE-2024-2961US	—	88.3% (100th)	Exploit	2024-04-17
The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT charac…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.