PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2024-22724] OsCommerce v4 RCE: Unveiling the file upload bypass threat

yokai.hakaisecurity.io | vulnerability | CVE-2024-22724 | #rce | #vulnerability-research | #research | #file-upload
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

In my recent research, I identified a critical vulnerability in osCommerce v4, specifically a Remote Code Execution (RCE) vulnerability enabled by bypassing file upload restrictions. I’ve always enjoyed testing file upload bypass techniques in my assessments. Vulnerabilities Identified in OsCommerce Version 4 The CVE-2024-22724 was assigned to the discovery of this vulnerability. The issue […]
CVE
CVE-2024-22724
Published
Collected

Related coverage

vulnerability · vercel.com
Reproducing, disclosing, and fixing the libheif vulnerability with Hacktron and the maintainers
How Vercel and Hacktron coordinated a fix for a remote code execution vulnerability that reached Next.js image optimization through sharp, libvips, and libheif.
research · github.com
Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis
Provides a detailed binary-level case study on PHP Zend memory manager behavior and worker state persistence after fatal out-of-memory errors.
research · crowdstrike.com
CrowdStrike Protects Customers from Threats Delivered via PHP2Shell
The Falcon platform provides out-of-the-box visibility and detection coverage for post-exploitation activities of CVE-2026-109618 and CVE-2026-109619.
research · slcyber.io
More Critical Bugs in Adobe Experience Manager: Pre-Auth RCE
Chaining an unauthenticated bulk import, an in-band XXE, leaked IMS credentials and Groovy execution into full pre-auth RCE on Adobe Experience Manager Cloud.
vulnerability · yokai.hakaisecurity.io
[EN] Deep Looking into Centreon
Summary In this research, three critical vulnerabilities were identified in Centreon Web and the Centreon Open Tickets module, allowing everything from full database extraction via SQL Injection to remote command execution on the server through a Path Traversal vulnerability in the file upload functionality and a Command Injection vulnerability. Exploitation requires only an authenticated session, […]
vulnerability · yokai.hakaisecurity.io
Por trás da falha: Erro de Lógica no Parser de Sessão do Roundcube [CVE-2025-49113]
Recentemente, foi descoberta uma vulnerabilidade no serviço de webmail Roundcube que permite a um usuário autenticado obter execução remota de comandos no servidor. A falha foi identificada pelo pesquisador Kirill Firsov e reportada em 2 de junho de 2025. Detalhes da vulnerabilidade Resumidamente, a falha ocorre devido a um erro de lógica em um analisador […]
Back