Hackers Exploit Zero-Day Magento Vulnerability to Steal Your Credit Cards

Hackers are increasingly exploiting an unknown flaw to siphon payment card information from e-commerce websites that use Magento, the most popular e-commerce platform owned by eBay. Security researchers at Sucuri are still investigating the attack vector, but they believe that cyber criminals are...

WordPress e-Commerce Plugin <= 3.8.9 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

WordPress e-Commerce Plugin <= 3.9.2 - Reflected XSS

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

WordPress e-Commerce Plugin <= 3.8.14.3 - Authorisation Bypass

This plugin is prone to an authorisation bypass vulnerability. Solution Upgrade the plugin...

WordPress e-Commerce Plugin 3.8.9.5 - File Upload

This plugin is prone to a GIF file upload vulnerability. Solution Upgrade the plugin...

WordPress e-Commerce Plugin <= 3.8.9 - SQL Injection

Because of this vulnerability, remote authenticated users can execute arbitrary SQL commands. Solution Update the plugin...

WordPress E-Commerce Predictive Search Plugin - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

WordPress e-Commerce Plugin <= 3.8.9.5 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

WordPress e-Commerce Plugin 3.8.9.5 - File Upload

This plugin is prone to a GIF file upload vulnerability. Solution Upgrade the plugin...

WordPress E-Commerce Predictive Search Plugin - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

PayPal Inc Bug Bounty #114 - JDWP RCE Vulnerability

Document Title: =============== PayPal Inc Bug Bounty 114 - JDWP RCE Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1474 Video: http://www.vulnerability-lab.com/getcontent.php?id=1474 Release Date: ============= 2015-04-28 Vulnerability...

PayPal Inc Bug Bounty #114 - JDWP RCE Vulnerability

Document Title: =============== PayPal Inc Bug Bounty 114 - JDWP RCE Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1474 Video: http://www.vulnerability-lab.com/getcontent.php?id=1474 Release Date: ============= 2015-04-28 Vulnerability...

The world e-Commerce system Magento exposed a remote code execution vulnerability-vulnerability warning-the black bar safety net

eBay investment e-Commerce system of Magento on a global scale within a total of more than 2 4 0 0 0 0 merchant, is acclaimed the world's best e-Commerce system. However, the consistently low profile of Magento recently, but“with”will affect the world tens of thousands of merchant remote code...

Critical Vulnerability Found in Magento eCommerce Platform

The most popular e-commerce platform owned by eBay, Magento is once again in the news. This time for a critical Remote Code Execution RCE vulnerability, affecting hundreds of thousands of online merchants worldwide. If exploited, the critical vulnerability could allow a hacker to compromise...

PayPal Inc Bug Bounty #113 - CS Cross Site Vulnerability

Document Title: =============== PayPal Inc Bug Bounty 113 - CS Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1453 Video: http://www.vulnerability-lab.com/getcontent.php?id=1454 View: https://www.youtube.com/watch?v=v5egy9VBs0...

Why Protecting Your Magento Ecommerce Website Is So Damn Important

The Market of E-commerce websites is at its peak, as today people love to shop online to save their time. However, E-commerce and financial sites stand first in the rundown of potential victims as they manage financial exchanges. The traditional way to target victims of e-commerce sites is to use...

N.E.T. E-Commerce Group Cross Site Scripting Vulnerability

Cross Site Scripting Vulnerability In N.E.T. E-Commerce Cms All Version @@@ @@@@@@@@@@@ @@@@@ @@@@@@@@@@ @@@ @@@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@@@@@@@@@ @@@ @ @@@@@@@@@@ @@@ @@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@...

HappyMall E-Commerce Software Member_HTML.CGI Command Execution (CVE-2003-0243)

A command Execution Vulnerability has been reported in HappyMall E-Commerce Software. The vulnerability is due to improper filtering of the normalhtml.cgi / memberhtml.cgi scripts, while passing pipe and semi-colon characters in the URL. A remote attacker can create a specially crafted URL to cau...

Multiple SQL Injection Vulnerabilities in ZeusCart

ZeusCart is an open source PHP and Mysql based e-commerce platform. ZeusCart has multiple SQL injection vulnerabilities that can be exploited by remote attackers to execute arbitrary SQL commands...

SEO Toaster E-Commerce 2.2.0 Cross Site Scripting

Affected software: http://demo.seotoaster.com Type of vulnerability: clickjacking Version: E-Commerce 2.2.0 URL: http://www.seotoaster.com/ Discovered by: Provensec Website: http://www.provensec.com Description:Free SEO Software & CMS: All in One Proof of concept seo toaster search filed was vuln...