Thousands of Breached Websites Turn Up On MagBo Black Market

A newly-discovered underground marketplace has been peddling access to more than 3,000 breached websites, catering to hackers hungry for valuable data and the ability to launch a range of attacks on unsuspecting site visitors. Advertisements for the Russian-speaking marketplace called MagBo were...

MagentoCore Card Skimmer Found on Mass Numbers of E-Commerce Sites

UPDATED A whopping 7,339 and counting individual e-commerce sites have been infested with the MagentoCore.net payment-card skimmer in the last six months, making the malicious script one of the most successful credit-card threats out there. The infections are part of a single effort, all tied bac...

Qibo B2B E-commerce System Stored Cross-site Scripting Vulnerability

Qibo B2B e-commerce system is based on PHP programs and Mysql database-based open source B2B industry portal e-commerce website builder . Qibo B2B e-commerce system stored cross-site scripting vulnerabilities. Attackers can insert malicious js code in the page to obtain user cookies and other...

SQL Injection Vulnerability in Zhejiang Instant E-commerce Co.

Ltd. is a website construction based on the integration of network marketing, bidding ranking, marketing hosting and other integrated e-commerce network marketing company. Ltd. building system there are SQL injection vulnerabilities, attackers can use the vulnerability to obtain sensitive...

Ticketmaster Breach: Just One Part of a Wide-Ranging Campaign

Ticketmaster’s announcement back on June 28 that it was the victim of a payment-card breach ‘turns out to be part of a much larger card-skimming campaign by the threat group Magecart. A whopping 800 e-commerce sites around the world have been targeted by the crooks so far, according to RiskIQ...

PayPal (Notify) - Bypass & Persistent Web Vulnerability

Document Title: =============== PayPal Notify - Bypass & Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1640 Video: http://www.vulnerability-lab.com/getcontent.php?id=1639 Release Date: ============= 2018-06-22 Vulnerability...

PayPal (Notify) - Bypass & Persistent Web Vulnerability

Document Title: =============== PayPal Notify - Bypass & Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1640 Video: http://www.vulnerability-lab.com/getcontent.php?id=1639 Release Date: ============= 2018-06-21 Vulnerability...

Magento Hackers Using Simple Evasion Trick to Reinfect Sites With Malware

Security researchers have been warning of a new trick that cybercriminals are leveraging to hide their malicious code designed to re-introduce the infection to steal confidential information from Magento based online e-commerce websites. So, if you have already cleaned up your hacked Magento...

Magento Products T1 - Bypass & Persistent Vulnerability

Document Title: =============== Magento Products T1 - Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1919 Release Date: ============= 2018-06-20 Vulnerability Laboratory ID VL-ID: ==================================== 19...

Magento MarketPlace T1 - Bypass & Persistent Vulnerability

Document Title: =============== Magento MarketPlace T1 - Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1902 Release Date: ============= 2018-06-17 Vulnerability Laboratory ID VL-ID: ====================================...

Smartshop 1 - id SQL Injection

Smartshop 1 - id SQL Injection Exploit Title: Smartshop 1 - SQL Injection Date: 2018-06-02 Exploit Author: L0RD or [email protected] Software Link: https://github.com/smakosh/Smartshop/archive/master.zip Vendor Homepage:...

UQcms_1.3.2_20180309 XSS Vulnerability in Seller Center

B2B2C multi-trader e-commerce system is a combination of many years of e-commerce development experience to launch B2B2C multi-store system, is currently one of the best e-commerce platforms in China, the system is designed as a "platform for self-supporting + suppliers stationed in the" e-commer...

iwebshop open source mall system 5.1 temporary trial version of the existence of file upload vulnerability

iWebShop is an open source WEB e-commerce B2B2C platform self-supporting + merchants stationed station-building system based on PHP language + MYSQL database development, using the MVC architecture Yii framework thinking design pattern carefully designed a product. iwebshop open source mall syste...

Joomla! Component JoomOCShop 1.0 - Cross-Site Request Forgery

Joomla! Component JoomOCShop 1.0 - Cross-Site Request Forgery Exploit Title: Joomla! extension JoomOCShop 1.0 - Cross site request forgery Date: 2018-05-28 Exploit Author: L0RD or [email protected] Software Link:...

Joomla JoomOCShop 1.0 Cross Site Request Forgery

Exploit Title: Joomla! extension JoomOCShop 1.0 - Cross site request forgery Date: 2018-05-28 Exploit Author: L0RD or [email protected] Software Link: https://extensions.joomla.org/extensions/extension/e-commerce/e-commerce-integrations/joomocshop/ Vendor Homepage:...

Joomla jCart for OpenCart 2.3.0.2 Component - Cross-Site Request Forgery Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! extension jCart for OpenCart 2.3.0.2 - Cross site request forgery Date: 2018-05-28 Exploit Author: L0RD or email protected Software Link:...

Joomla JoomOCShop 1.0 Component - Cross-Site Request Forgery Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! extension JoomOCShop 1.0 - Cross site request forgery Exploit Author: L0RD or email protected Software Link: https://extensions.joomla.org/extensions/extension/e-commerce/e-commerce-integrations/joomocshop/ Vendor...

Joomla! Component JoomOCShop 1.0 - Cross-Site Request Forgery

Exploit Title: Joomla! extension JoomOCShop 1.0 - Cross site request forgery Date: 2018-05-28 Exploit Author: L0RD or [email protected] Software Link: https://extensions.joomla.org/extensions/extension/e-commerce/e-commerce-integrations/joomocshop/ Vendor Homepage:...

A Salesmans Code Execution: PrestaShop 1.7.2.4

The Impact With more than 270,000 running instances, PrestaShop it is one of the top 10 most used content management systems in the Web. Additionally to the classical software download, PrestaShop Ready offers to rent an online shop and to get administrative access to pre-hosted PrestaShop...

Stored Cross-Site Scripting Vulnerability at Order Invoice in Cloud EC E-commerce System

Cloud EC e-commerce system hereinafter referred to as Cloud EC is a set of PHP + MYSQL-based open source e-commerce system software developed independently by Cloud MYSQL e-commerce Co. Cloud EC e-commerce system order invoice at the existence of stored cross-site scripting vulnerabilities. An...