Files
PoC-in-GitHub/2026/CVE-2026-75650.json

258 lines
9.6 KiB
JSON
Raw Permalink Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
[
{
"id": 1360154927,
"name": "stylesmuggler-ioc-toolkit",
"full_name": "jithinkrishnanrs\/stylesmuggler-ioc-toolkit",
"owner": {
"login": "jithinkrishnanrs",
"id": 57309574,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57309574?v=4",
"html_url": "https:\/\/github.com\/jithinkrishnanrs",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/jithinkrishnanrs\/stylesmuggler-ioc-toolkit",
"description": "StyleSmuggler (CVE-2026-75650) IOC toolkit for Magento Open Source and Adobe Commerce. Detect compromised stores, Rust implants, PHP web shells, persistence artifacts, and known indicators of compromise.",
"fork": false,
"created_at": "2026-09-07T11:38:55Z",
"updated_at": "2026-09-17T22:46:15Z",
"pushed_at": "2026-09-17T22:46:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"adobe-commerce",
"cve-2026-75650",
"incident-response",
"indicators-of-compromise",
"ioc",
"magento",
"magento-security",
"magento2",
"malware-detection",
"rce",
"remote-code-execution",
"security-tool",
"stylesmuggler",
"vulnerability-scanner",
"web-shell"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1360969245,
"name": "cve-2026-75650-magento-validation-lab",
"full_name": "dinosn\/cve-2026-75650-magento-validation-lab",
"owner": {
"login": "dinosn",
"id": 3851678,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/3851678?v=4",
"html_url": "https:\/\/github.com\/dinosn",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/dinosn\/cve-2026-75650-magento-validation-lab",
"description": "Docker lab reproducing the complete CVE-2026-75650 StyleSmuggler unauthenticated HTTP RCE and validating Adobe VULN-39341.",
"fork": false,
"created_at": "2026-09-08T05:39:57Z",
"updated_at": "2026-10-28T16:48:07Z",
"pushed_at": "2026-09-12T19:18:08Z",
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 7,
"score": 0,
"subscribers_count": 0
},
{
"id": 1361089465,
"name": "stylesmuggler-adobe-patches",
"full_name": "disrex-group\/stylesmuggler-adobe-patches",
"owner": {
"login": "disrex-group",
"id": 144544824,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/144544824?v=4",
"html_url": "https:\/\/github.com\/disrex-group",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/disrex-group\/stylesmuggler-adobe-patches",
"description": "composer require delivery of Adobe's official APSB26-146 (CVE-2026-75650) fix for Magento, via cweagans\/composer-patches. Auto-selects the patch for your Magento version.",
"fork": false,
"created_at": "2026-09-08T07:59:02Z",
"updated_at": "2026-10-08T04:57:31Z",
"pushed_at": "2026-09-08T10:56:25Z",
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 5,
"score": 0,
"subscribers_count": 0
},
{
"id": 1361136757,
"name": "stylesmuggler-adobe-patches-mageos",
"full_name": "disrex-group\/stylesmuggler-adobe-patches-mageos",
"owner": {
"login": "disrex-group",
"id": 144544824,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/144544824?v=4",
"html_url": "https:\/\/github.com\/disrex-group",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/disrex-group\/stylesmuggler-adobe-patches-mageos",
"description": "composer require delivery of Adobe's official APSB26-146 (CVE-2026-75650) fix for Mage-OS stores, via cweagans\/composer-patches. Companion to stylesmuggler-adobe-patches (Magento).",
"fork": false,
"created_at": "2026-09-08T08:47:20Z",
"updated_at": "2026-09-08T10:50:41Z",
"pushed_at": "2026-09-08T08:47:26Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1367372706,
"name": "stylesmuggler",
"full_name": "fortbridge\/stylesmuggler",
"owner": {
"login": "fortbridge",
"id": 75114098,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/75114098?v=4",
"html_url": "https:\/\/github.com\/fortbridge",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/fortbridge\/stylesmuggler",
"description": "Private HTTP-only reproduction of CVE-2026-75650 StyleSmuggler",
"fork": false,
"created_at": "2026-09-12T14:27:02Z",
"updated_at": "2026-10-27T16:17:02Z",
"pushed_at": "2026-09-12T17:32:39Z",
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 8,
"score": 0,
"subscribers_count": 0
},
{
"id": 1388400437,
"name": "CVE-2026-75650",
"full_name": "abraxas\/CVE-2026-75650",
"owner": {
"login": "abraxas",
"id": 299946762,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/299946762?v=4",
"html_url": "https:\/\/github.com\/abraxas",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/abraxas\/CVE-2026-75650",
"description": "CVE-2026-75650 - Magento Open Source - Critical 10.0 - Unauthenticated POST \/graphql - Unauthenticated Remote Code Execution (StyleSmuggler SSTI)",
"fork": false,
"created_at": "2026-09-26T02:32:55Z",
"updated_at": "2026-10-28T18:02:09Z",
"pushed_at": "2026-10-28T18:02:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1433936193,
"name": "B63-POC-CVE-2026-75650",
"full_name": "basesixtythree\/B63-POC-CVE-2026-75650",
"owner": {
"login": "basesixtythree",
"id": 220976450,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/220976450?v=4",
"html_url": "https:\/\/github.com\/basesixtythree",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/basesixtythree\/B63-POC-CVE-2026-75650",
"description": "CVE-2026-75650 (StyleSmuggler): unauthenticated RCE via template injection in Magento Open Source \/ Adobe Commerce 2.4.4–2.4.9 — b63 showcase, lab-verified with patched-build negative test",
"fork": false,
"created_at": "2026-10-26T05:19:09Z",
"updated_at": "2026-11-01T20:17:31Z",
"pushed_at": "2026-10-26T05:19:13Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"b63",
"cve",
"cve-2026-75650",
"magento",
"php",
"poc",
"rce",
"security-research"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]