EUVD-2014-9564

Malware in sbrugna...

Hackers Exploit Google Tag Manager to Deploy Credit Card Skimmers on Magento Stores

Threat actors have been observed leveraging Google Tag Manager GTM to deliver credit card skimmer malware targeting Magento-based e-commerce websites. Website security company Sucuri said the code, while appearing to be a typical GTM and Google Analytics script used for website analytics and...

Magento Sites Targeted with Sneaky Credit Card Skimmer via Swap Files

Threat actors have been observed using swap files in compromised websites to conceal a persistent credit card skimmer and harvest payment information. The sneaky technique, observed by Sucuri on a Magento e-commerce site's checkout page, allowed the malware to survive multiple cleanup attempts, t...

CVE-2014-9758

CVE-2014-9758 is a cross-site scripting (XSS) vulnerability in Magento E-Commerce Platform 1.9.0.1. Affected component: Magento 1.9.0.1 web application. Root cause: XSS in the platform. Impact per sources: Confidentiality LOW, Integrity LOW, Availability NONE (CVSS3.1); Attack vector NETWORK, Use...

CVE-2014-9758: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Magento E-Commerce Platform 1.9.0.1...

PT-2017-6394

Name of the Vulnerable Software and Affected Versions Magento E-Commerce Platform version 1.9.0.1 Description A cross-site scripting XSS issue affects the Magento E-Commerce Platform, allowing potential exploitation. Recommendations For Magento E-Commerce Platform version 1.9.0.1, update to a new...