Card-Skimming Scripts Hide Behind Google Analytics, Angular

A host of credit card-stealing scripts have popped up on the web, injected into websites and purporting to be legitimate Google Analytics or Angular utilities in order to avoid webmaster notice. According to research from Sucuri, the malicious code is obfuscated and injected into legitimate JS...

New Golang brute forcer discovered amid rise in e-commerce attacks

E-commerce websites continue to be targeted by online criminals looking to steal personal and payment information directly from unaware shoppers. Recently, attacks have been conducted via skimmer, which is a piece of code that is either directly injected into a hacked site or referenced externall...

Magento Community Edition 2.0.x < 2.0.18 Multiple Vulnerabilities

Binary data 700418.prm...

Magento Community Edition 2.0.x < 2.0.16 Multiple Vulnerabilities

Binary data 700416.prm...

Magento Community Edition 2.0.x < 2.0.17 Multiple Vulnerabilities

Binary data 700417.prm...

Magento Community Edition 2.x < 2.1.2 Multiple Vulnerabilities

Binary data 700414.prm...

Magento Community Edition 2.1.x < 2.1.7 / 2.0.x < 2.0.14 Multiple Vulnerabilities

Binary data 700415.prm...

Magento Code Execution Vulnerability

Magento is a professional open source e-commerce system. A code execution vulnerability exists in Magento, which can be exploited by an attacker to execute arbitrary code...

Magento Arbitrary File Read Vulnerability

Magento is a professional open source e-commerce system. Magento has an arbitrary file read vulnerability that can be exploited by an attacker to read arbitrary files...

Magento Multiple Vulnerabilities (Nov 2018)

Magento is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:magentocommerce:magento"; if...

Magento 2.2.7 and 2.1.16 Security update. Closes RCE,XSS and other vulnerabilities

More info at https://magento.com/security/patches/magento-2.2.7-and-2.1.16-security-update...

SUPEE-10975 - Security enhancements that help close RCE,XSS,CSRF and other vulnerabilities

More info at https://magento.com/security/patches/supee-10975...

SUPEE-10975 - Security enhancements that help close RCE,XSS,CSRF and other vulnerabilities

More info at https://magento.com/security/patches/supee-10975...

Magecart Cybergang Targets 0days in Third-Party Magento Extensions

Criminals behind the Magecart gang have shifted tactics, and are now targeting nearly two dozen unpatched vulnerabilities found in third-party plugins used in the Magento e-commerce platform. Previously, the Magecart cybergang had focused on the core of Magento, using attack strategies such as...

Magento 2.2.6 and 2.1.15 Security update

More info at https://magento.com/security/patches/magento-2.2.6-and-2.1.15-security-update...

leroidelafenetre.fr XSS vulnerability

Open Bug Bounty ID: OBB-656290 Description| Value ---|--- Affected Website:| leroidelafenetre.fr Open Bug Bounty Program:| View Open Bug Bounty Program Vulnerable Application:| Magento Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Magento - Proof of Concept SSRF & XSPA Vulnerability

Document Title: =============== Magento - Proof of Concept SSRF & XSPA Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1632 Video: https://www.youtube.com/watch?v=Z2jKGQa52kA Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1631 Release Date:...

Magento - Proof of Concept SSRF & XSPA Vulnerability

Document Title: =============== Magento - Proof of Concept SSRF & XSPA Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1632 Video: https://www.youtube.com/watch?v=Z2jKGQa52kA Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1631 Release Date:...

SUPEE-10752 - Multiple security enhancements vulnerabilities

More info at https://magento.com/security/patches/supee-10752...

Magento 2.2.5 and 2.1.14 Security update

More info at https://magento.com/security/patches/magento-2.2.5-and-2.1.14-security-update...