Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability

PoC: CVE-2024-34102

CVE-2024-34102: Unauthenticated Magento XXE

PoC: CVE-2024-34102

POC for CVE-2024-34102 : Unauthenticated Magento XXE and bypassing WAF , You will get http connection on ur webhook

PoC: module-cosmicsting-patch

Free security patch for Magento Open Source and Mage-OS by Big Cart Energy: closes CVE-2024-34102 (CosmicSting) on the Magento 2.3 and 2.4 releases that have no official fix, as one plugin on the Web API input processor that applies the rule of Adobe's fix. No core file is modified.

PoC: cosmicsting-cve-2024-34102-exploit

Complete CosmicSting (CVE-2024-34102) exploit suite for Magento/Adobe Commerce XXE vulnerability

PoC: CVE-2024-34102

CVE-2024-34102 exploit for python3

PoC: magento2-encryption-key-manager-cli

A utility for Magento 2 encryption key rotation and management. CVE-2024-34102(aka Cosmic Sting) victims can use it as an aftercare.

PoC: CVE-2024-34102

adobe commerce

PoC: CVE-2024-34102

PoC for CVE-2024-34102

PoC: magento2-cosmic-sting-patch

Magento 2 patch for CVE-2024-34102(aka CosmicSting). Another way(as an extension) to hotfix the security hole if you cannot apply the official patch or cannot upgrade Magento.

PoC: CVE-2024-34102-RCE-PoC

CVE-2024-34102 unauthenticated RCE PoC for Magento/adobe commerce

PoC: CVE-2024-34102-RCE

CVE-2024-34102 unauthenticated RCE PoC for Magento/adobe commerce

PoC: CVE-2024-34102-PoC

CVE-2024-34102 unauthenticated RCE PoC for Magento/adobe commerce and (NEW 0DAY)?

PoC: CVE-2024-34102-RCE

CVE-2024-34102 unauthenticated RCE PoC for Magento/adobe commerce

PoC: CVE-2024-34102-Python

CVE-2024-34102 Exploiter based on Python

PoC: CVE-2024-34102

Exploitation CVE-2024-34102

PoC: CVE-2024-34102-RCE-POC

CVE-2024-34102 unauthenticated RCE PoC for Magento/adobe commerce

PoC: CVE-2024-34102

Burp Extension to test for CVE-2024-34102

PoC: CVE-2024-34102-RCE

CVE-2024-34102 unauthenticated RCE PoC for Magento/adobe commerce

PoC: poc

poc for CVE-2024-34102

PoC: cosmicsting-validator

CosmicSting (CVE-2024-34102) POC / Patch Validator

PoC: CVE-2024-34102-CosmicSting-XXE-in-Adobe-Commerce-and-Magento

CosmicSting: critical unauthenticated XXE vulnerability in Adobe Commerce and Magento (CVE-2024-34102)

PoC: CVE-2024-34102

Magento XXE

PoC: CVE-2024-34102

Magento XXE (CVE-2024-34102)

PoC: CVE-2024-34102

TEST CVE-2024-34102 Magento XXE

PoC: CVE-2024-34102

CosmicSting (CVE-2024-34102)

PoC: CVE-2024-34102

A PoC demonstration , critical XML entity injection vulnerability in Magento

PoC: CVE-2024-34102

POC for CVE-2024-34102. A pre-authentication XML entity injection issue in Magento / Adobe Commerce.

PoC: CVE-2024-34102-RCE

CVE-2024-34102 unauthenticated RCE PoC for Magento/adobe commerce