CVE-2022-35500

CVE-2022-35500 Stored Cross-site Scripting XSS in leave comment functionality in Amasty Blog Pro for Magento 2 Description The leave comment functionality in the Amasty Blog Pro 2.10.3 and 2.10.4 plugin for Magento 2 allows injection of JavaScript code in the AmBlogLeaveComment mutation in name...

CVE-2022-36432

CVE-2022-36432 Cross-site Scripting XSS in Preview functionality in Amasty Blog Pro for Magento 2 Description The Preview functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 uses eval unsafely. This allows attackers to perform Cross-site Scripting attacks on admin panel users by...

CVE-2022-35501

CVE-2022-35501 Stored Cross-site Scripting XSS in blog-post creation functionality in Amasty Blog Pro for Magento 2 Description The post creation functionality in the Amasty Blog Pro 2.10.3 and 2.10.4 plugin for Magento 2 allows injection of JavaScript code in the title field, leading to XSS...

PoC-Funcional---CVE-2026-45247-Mirasvit-Full-Page-Cache-Warmer-RCE-

markdown CVE-2026-45247 - Mirasvit Full Page Cache Warmer for Magento 2 - PHP Object Injection → RCE -red 📋 Descripción CVE-2026-45247 es una vulnerabilidad crítica de Inyección de Objetos PHP PHP Object Injection en la extensión Mirasvit Full Page Cache Warmer para Magento 2 y Adobe Commerce. Un...

CVE-2022-36433

CVE-2022-36433 Cross-site Scripting XSS in blog-post creation functionality in Amasty Blog Pro for Magento 2 Description The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 allows injection of JavaScript code in the shortcontent and fullcontent fields, leading ...

Magento-ver.-2.4.6

Título del exploit: FireBear Studio Improved Import & Export ver. 3.8.6 para Magento 2.4.6 - Inyección XSLT del lado del servidor Fecha: 2023-11-17 Autor del exploit: tmrswrr Página web del proveedor: FireBear Studio Enlace del software: FireBear Studio Improved Import & Export Versión: FireBear...

magento2-cosmic-sting-patch

Magento 2 CVE-2024-34102（又名Cosmic Sting）补丁 一个替代解决方案（作为Magento 2扩展），用于修复XXE漏洞CVE-2024-34102（又名Cosmic Sting）。如果您无法升级Magento或无法应用官方补丁，请尝试这个。 如果您不修复此漏洞，攻击者可能实现远程代码执行（RCE）。我们已观察到真实世界的攻击。 CVE-2024-34102 受影响Magento版本（从2.3开始） 2.3.0 2.4.4-p8 2.4.5 2.4.5-p7 2.4.6 2.4.6-p5 2.4.7 背景 CVE-2024-34102（又名Cosmic...

magento2-template-filter-patch

Parche del Filtro de Plantillas de Magento 2 para CVE-2022-24086, CVE-2022-24087 Parche de Magento 2 para CVE-2022-24086, CVE-2022-24087. Corrige la vulnerabilidad RCE y los errores relacionados mediante un escape profundo de variables de plantilla. Si no puede actualizar Magento o no puede aplic...

magento2-encryption-key-manager-cli

Magento 2 加密密钥管理器 CLI 一款用于 Magento 2 加密密钥轮换和管理的实用工具。CVE-2024-34102（又名 Cosmic Sting）的受害者可将其用于善后处理。 设计用途 开发用途 部署自动化 CVE-2024-34102（又名 Cosmic Sting）善后处理 CVE-2024-34102（又名 Cosmic Sting） 应用安全补丁后，您需要执行一次密钥轮换，以完全阻止攻击者通过管理员级别的 WebAPI 访问。 如果您无法升级或应用官方隔离补丁，请参阅 我们的补丁。 如果官方的加密密钥轮换命令 php bin/magento...

amasty-chekout-POC-rce

CVE-2026-53787 - Amasty Order Attributes Carga de archivos no autenticada Descripción CVE-2026-53787 es una vulnerabilidad crítica de carga de archivos arbitrarios no autenticada en la extensión Amasty Order Attributes para Magento 2 en versiones anteriores a la 4.0.0. La vulnerabilidad permite a...

cosmicsting-validator

A Cosmicsting POC, with a bash script to check all of our hosted sites to confirm the patch. This repository is provided to allow store owners / hosts to confirm the patch is applied on stores. Within check.bash add domains to the SITES list. https://www.sdj.pw/posts/magento2-cosmic-sting-check/...

CVE-2026-79324

Missing authorization in the Address Delete controller in Mageplaza GDPR for Magento 2 mageplaza/module-gdpr through 4.2.9 allows remote unauthenticated attackers to delete any customer's saved address, and to erase all stored addresses by iterating the address id, via a GET request to...

CVE-2026-79323

Information disclosure in the blogComments GraphQL query in Magefan Blog GraphQL for Magento 2 magefan/module-blog-graph-ql through 2.2.1 allows remote unauthenticated attackers to obtain blog commenter email addresses and internal customer and admin identifiers via a POST request to /graphql...

CVE-2026-79322

SQL injection in the RelatedProduct block in Mageplaza Blog for Magento 2 mageplaza/magento-2-blog-extension through 4.3.2 allows remote unauthenticated attackers to execute arbitrary SQL commands and read arbitrary database contents via the id parameter to /mpblog/post/view...

Magneto-PolyShell

Exploit Magento 2 RCE - Carga de archivos no autenticada para RCE ⚠️ Esta herramienta es solo para pruebas de seguridad educativas y autorizadas. El uso no autorizado contra sistemas que no te pertenecen es ilegal. Este exploit apunta a una vulnerabilidad crítica de ejecución remota de código RCE...

SessionReaper-CVE-2025-54236

SessionReaper — CVE-2025-54236 Unified PoC for CVE-2025-54236 "SessionReaper", a critical unauthenticated RCE in Magento 2 / Adobe Commerce via nested deserialization in the REST API. CVSS: 9.1 Critical Root cause: Improper Input Validation CWE-20 in ServiceInputProcessor; the exploit primitive i...

CVE-2026-79322

SQL injection in the RelatedProduct block in Mageplaza Blog for Magento 2 mageplaza/magento-2-blog-extension through 4.3.2 allows remote unauthenticated attackers to execute arbitrary SQL commands and read arbitrary database contents via the id parameter to /mpblog/post/view...

EUVD-2026-75135

Missing authorization in the Address Delete controller in Mageplaza GDPR for Magento 2 mageplaza/module-gdpr through 4.2.9 allows remote unauthenticated attackers to delete any customer's saved address, and to erase all stored addresses by iterating the address id, via a GET request to...

EUVD-2026-75137

Information disclosure in the blogComments GraphQL query in Magefan Blog GraphQL for Magento 2 magefan/module-blog-graph-ql through 2.2.1 allows remote unauthenticated attackers to obtain blog commenter email addresses and internal customer and admin identifiers via a POST request to /graphql...

CVE-2026-79324

Missing authorization in the Address Delete controller in Mageplaza GDPR for Magento 2 mageplaza/module-gdpr through 4.2.9 allows remote unauthenticated attackers to delete any customer's saved address, and to erase all stored addresses by iterating the address id, via a GET request to...