Magento Community Edition 2.0.x < 2.0.16 Multiple Vulnerabilities

Binary data 700416.prm...

Magento Community Edition 2.0.x < 2.0.18 Multiple Vulnerabilities

Binary data 700418.prm...

Magento Community Edition 2.0.x < 2.0.17 Multiple Vulnerabilities

Binary data 700417.prm...

Magento Community Edition 2.x < 2.1.2 Multiple Vulnerabilities

Binary data 700414.prm...

Magento Community Edition 2.1.x < 2.1.7 / 2.0.x < 2.0.14 Multiple Vulnerabilities

Binary data 700415.prm...

Magento Arbitrary File Read Vulnerability

Magento is a professional open source e-commerce system. Magento has an arbitrary file read vulnerability that can be exploited by an attacker to read arbitrary files...

Magento Code Execution Vulnerability

Magento is a professional open source e-commerce system. A code execution vulnerability exists in Magento, which can be exploited by an attacker to execute arbitrary code...

Magento Multiple Vulnerabilities (Nov 2018)

Magento is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:magentocommerce:magento"; if...

Magento 2.2.7 and 2.1.16 Security update. Closes RCE,XSS and other vulnerabilities

More info at https://magento.com/security/patches/magento-2.2.7-and-2.1.16-security-update...

SUPEE-10975 - Security enhancements that help close RCE,XSS,CSRF and other vulnerabilities

More info at https://magento.com/security/patches/supee-10975...

SUPEE-10975 - Security enhancements that help close RCE,XSS,CSRF and other vulnerabilities

More info at https://magento.com/security/patches/supee-10975...

Magecart Cybergang Targets 0days in Third-Party Magento Extensions

Criminals behind the Magecart gang have shifted tactics, and are now targeting nearly two dozen unpatched vulnerabilities found in third-party plugins used in the Magento e-commerce platform. Previously, the Magecart cybergang had focused on the core of Magento, using attack strategies such as...

Magento 2.2.6 and 2.1.15 Security update

More info at https://magento.com/security/patches/magento-2.2.6-and-2.1.15-security-update...

leroidelafenetre.fr XSS vulnerability

Open Bug Bounty ID: OBB-656290 Description| Value ---|--- Affected Website:| leroidelafenetre.fr Open Bug Bounty Program:| View Open Bug Bounty Program Vulnerable Application:| Magento Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Magento - Proof of Concept SSRF & XSPA Vulnerability

Document Title: =============== Magento - Proof of Concept SSRF & XSPA Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1632 Video: https://www.youtube.com/watch?v=Z2jKGQa52kA Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1631 Release Date:...

Magento - Proof of Concept SSRF & XSPA Vulnerability

Document Title: =============== Magento - Proof of Concept SSRF & XSPA Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1632 Video: https://www.youtube.com/watch?v=Z2jKGQa52kA Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1631 Release Date:...

SUPEE-10752 - Multiple security enhancements vulnerabilities

More info at https://magento.com/security/patches/supee-10752...

Magento 2.2.5 and 2.1.14 Security update

More info at https://magento.com/security/patches/magento-2.2.5-and-2.1.14-security-update...

Magento - Filter Bypass & Persistent Web Vulnerabilities

Document Title: =============== Magento - Filter Bypass & Persistent Web Vulnerabilities References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1916 Videos: 4 x Proof of Concept https://www.youtube.com/watch?v=WIDwbSTCLQ https://www.youtube.com/watch?v=zaPRfvNQJzk...

Magento - Filter Bypass & Persistent Web Vulnerabilities

Document Title: =============== Magento - Filter Bypass & Persistent Web Vulnerabilities References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1916 Videos: 4 x Proof of Concept https://www.youtube.com/watch?v=WIDwbSTCLQ https://www.youtube.com/watch?v=zaPRfvNQJzk...