CVE-2024-34102

Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in arbitrary code execution. An attacker could exploit this vulnerability by sending a crafted XML document that references external entities. Exploitation of this issue does not require user interaction.

Github link:
https://github.com/1mpl3ment3d/CVE-2024-34102-RCE-POC

CVE-2024-4879

None

Github link:
https://github.com/Brut-Security/CVE-2024-4879

CVE-2024-39929

None

Github link:
https://github.com/rxerium/CVE-2024-39929

CVE-2024-4879

ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington DC Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. ServiceNow applied an update to hosted instances, and ServiceNow released the update to our partners and self-hosted customers. Listed below are the patches and hot fixes that address the vulnerability. If you have not done so already, we recommend applying security patches relevant to your instance as soon as possible.

Github link:
https://github.com/bigb0x/CVE-2024-4879

CVE-2024-34102

Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in arbitrary code execution. An attacker could exploit this vulnerability by sending a crafted XML document that references external entities. Exploitation of this issue does not require user interaction.

Github link:
https://github.com/bughuntar/CVE-2024-34102

CVE-2023-34960

A command injection vulnerability in the wsConvertPpt component of Chamilo v1.11.* up to v1.11.18 allows attackers to execute arbitrary commands via a SOAP API call with a crafted PowerPoint name.

Github link:
https://github.com/dvtarsoul/ChExp

CVE-2024-40512

None

Github link:
https://github.com/Jansen-C-Moreira/CVE-2024-40512

CVE-2024-40511

None

Github link:
https://github.com/Jansen-C-Moreira/CVE-2024-40511

CVE-2024-40510

None

Github link:
https://github.com/Jansen-C-Moreira/CVE-2024-40510

CVE-2024-40509

None

Github link:
https://github.com/Jansen-C-Moreira/CVE-2024-40509

CVE-2024-40508

None

Github link:
https://github.com/Jansen-C-Moreira/CVE-2024-40508

CVE-2024-40507

None

Github link:
https://github.com/Jansen-C-Moreira/CVE-2024-40507

CVE-2024-40506

None

Github link:
https://github.com/Jansen-C-Moreira/CVE-2024-40506

CVE-2024-39250

None

Github link:
https://github.com/efrann/CVE-2024-39250

CVE-2014-6271

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka "ShellShock." NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.

Github link:
https://github.com/TheRealCiscoo/Shellshock-Exploit

CVE-2024-6387

A signal handler race condition was found in OpenSSH's server (sshd), where a client does not authenticate within LoginGraceTime seconds (120 by default, 600 in old OpenSSH versions), then sshd's SIGALRM handler is called asynchronously. However, this signal handler calls various functions that are not async-signal-safe, for example, syslog().

Github link:
https://github.com/Jhonsonwannaa/CVE-2024-6387

CVE-2023-4220

Unrestricted file upload in big file upload functionality in `/main/inc/lib/javascript/bigupload/inc/bigUpload.php` in Chamilo LMS <= v1.11.24 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote code execution via uploading of web shell.

Github link:
https://github.com/Al3xGD/CVE-2023-4220-Exploit

CVE-2024-0044

In createSessionInternal of PackageInstallerService.java, there is a possible run-as any app due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.



Github link:
https://github.com/Kai2er/CVE-2024-0044-EXP

CVE-2024-30088

Windows Kernel Elevation of Privilege Vulnerability

Github link:
https://github.com/exploits-forsale/collateral-damage

CVE-2024-22274

The vCenter Server contains an authenticated remote code execution vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to run arbitrary commands on the underlying operating system.

Github link:
https://github.com/l0n3m4n/CVE-2024-22274-RCE

CVE-2024-6387

A signal handler race condition was found in OpenSSH's server (sshd), where a client does not authenticate within LoginGraceTime seconds (120 by default, 600 in old OpenSSH versions), then sshd's SIGALRM handler is called asynchronously. However, this signal handler calls various functions that are not async-signal-safe, for example, syslog().

Github link:
https://github.com/ThatNotEasy/CVE-2024-6387