295 matches found
CVE-2019-7942
A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with admin privileges to create or edit a product can execute arbitrary code via malicious XML layout updates...
CVE-2019-7861
Insufficient server-side validation of user input could allow an attacker to bypass file upload restrictions in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2...
📄 Adobe Commerce Insecure Deserialization
This flaw in Magento 2 / Adobe Commerce 2.4.x enables remote attackers to manipulate internal session handling paths and abuse PHP object chains Guzzle FileCookieJar gadget to achieve arbitrary file write, leading to remote code execution...
Exploit for Improper Input Validation in Adobe Commerce
CVE-2025-54236 - Magento Remote Code Execution Exploit Des...
GHSA-R355-75HW-R8JF Magento allows incorrect authorization
Magento versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Incorrect Authorization vulnerability. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not...
GHSA-2768-5WMV-CFFF Magento vulnerable to stored Cross-Site Scripting (XSS)
Magento versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be...
EUVD-2021-22669
Malware in sbrugna...
EUVD-2016-1704
Malware in sbrugna...
EUVD-2020-1431
Malware in sbrugna...
EUVD-2015-1536
Malware in sbrugna...
EUVD-2019-0726
Malware in sbrugna...
EUVD-2021-22654
Malware in sbrugna...
EUVD-2019-0768
Malware in sbrugna...
EUVD-2019-17562
Malware in sbrugna...
EUVD-2019-0724
Malware in sbrugna...
EUVD-2021-2249
Malware in sbrugna...
EUVD-2022-5325
Malicious code in bioql PyPI...
EUVD-2025-3711
Malicious code in bioql PyPI...