CVE-2022-35501

CVE-2022-35501 Cross-site Scripting XSS memorizzato nella funzionalità di creazione dei post del blog in Amasty Blog Pro per Magento 2 Descrizione La funzionalità di creazione dei post nel plugin Amasty Blog Pro 2.10.3 e 2.10.4 per Magento 2 consente l'iniezione di codice JavaScript nel campo...

CVE-2022-35500

CVE-2022-35500 Cross-site Scripting XSS persistente nella funzionalità di invio commenti in Amasty Blog Pro per Magento 2 Descrizione La funzionalità di invio commenti nel plugin Amasty Blog Pro 2.10.3 e 2.10.4 per Magento 2 consente l'iniezione di codice JavaScript nella mutation...

magento2-cosmic-sting-patch

Patch per Magento 2 per CVE-2024-34102 noto anche come Cosmic Sting Una soluzione alternativa come estensione per Magento 2 per correggere la vulnerabilità XXE CVE-2024-34102 nota anche come Cosmic Sting. Se non puoi aggiornare Magento o non puoi applicare la patch ufficiale, prova questa. Se non...

CVE-2025-43990-Magento-RCE

Magento APSB25-94 — Caricamento file non autenticato a RCE Panoramica Sfrutta il caricamento di file non autenticato in Magento / Adobe Commerce tramite il caricamento di file customoptions del carrello ospite API REST. Catena d'attacco root@kitploit: 1. GraphQL → leak product SKU 2. REST API →...

Magento-APSB22-48-Security-Patches

Offizielle Magento-Patches wurden veröffentlicht:Magento Docs Diese Patches adressieren die gleichen Sicherheitsprobleme wie dieses Repository. Allerdings haben wir einige Fehlerbehebungen für ältere Magento-Versionen hinzugefügt. Sicherheits-Patches für APSB22-48 Dieses Repository enthält Magent...

Magneto-PolyShell

Magento 2 RCE Exploit - Unauthentifizierter Datei-Upload zu RCE ⚠️ Dieses Tool dient ausschließlich zu Bildungs- und autorisierten Sicherheitstests. Unbefugte Nutzung gegen Systeme, die Ihnen nicht gehören, ist illegal. Dieses Exploit zielt auf eine kritische Schwachstelle für nicht...

CVE-2025-54236

Adobe Magento SessionReaper LFI PoC Un semplice proof-of-concept in Python che dimostra la vulnerabilità CVE-2025-54236 SessionReaper che colpisce versioni vulnerabili di Adobe Magento. Solo per test di sicurezza educativi e autorizzati. Funzionalità Normalizzazione automatica dell'URL del target...

magento-swf-patched-CVE-2011-2461

magento-swf-patched-CVE-2011-2461 Gepatchte Version der uploader.swf und uploaderSingle.swf zur Behebung von CVE-2011-2461 Weitere Informationen über die verwundbaren .swf-Dateien im Magento-Kern findest du hier -...

magento2-template-filter-patch

Patch del filtro template di Magento 2 per CVE-2022-24086, CVE-2022-24087 Patch di Magento 2 per CVE-2022-24086, CVE-2022-24087. Risolve la vulnerabilità RCE e i bug correlati eseguendo un escaping profondo delle variabili dei template. Se non puoi aggiornare Magento o non puoi applicare le patch...

cve-2026-71362-magento-lab

CVE-2026-71362 — Magento / Adobe Commerce Labor zum Identitätswechsel der Kundensitzung Ein in sich geschlossenes Docker-Labor mit einem einzigen Befehl, das CVE-2026-71362 Ende-zu-Ende reproduziert und es Ihnen ermöglicht, Adobes Fix zu verifizieren, damit Verteidiger, Forscher und Studenten ein...

NekoBotV1

NekoBotV1Rev | Auto-Exploiter mit 500+ Exploits und 2000+ Shells Für alte Version NekobotV1 NekoBotV1Rev ist ein Auto-Exploit-Tool, um das Eindringen in eine oder mehrere Websites Wordpress, Joomla, Drupal, Magento, Opencart, usw. zu erleichtern. Funktionen : + Wordpress : root@kitploit: 1-...

CVE-2021-21014

PoC Limitado CVE-2021-21014 As versões 2.4.1 e anteriores, 2.4.0-p1 e anteriores e 2.3.6 e anteriores do Magento são vulneráveis a um bypass de restrição de upload de arquivos. Uma exploração bem-sucedida pode levar à execução arbitrária de código por um atacante autenticado. Versão afetada: =...

Exploit for CVE-2026-71362

CVE-2026-71362 — Magento / Adobe Commerce customer-session ide...

APSB26-92 : Security update available for Adobe Commerce

Adobe has released a security update for Adobe Commerce and Magento Open Source. This update resolves critical, important, and moderate vulnerabilities. Successful exploitation could result in security feature bypass, arbitrary code execution, and privilege escalation...

Cross-site Scripting (XSS)

Overview magento/community-edition is a modern cloud eCommerce platform. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the form fields. An attacker can execute arbitrary JavaScript code in the context of another user's browser session by injecting malicious...

Incorrect Authorization

Overview magento/community-edition is a modern cloud eCommerce platform. Affected versions of this package are vulnerable to Incorrect Authorization via the authorization process. An attacker can bypass security measures and gain unauthorized read access by leveraging high privileges without...

Incorrect Authorization

Overview magento/community-edition is a modern cloud eCommerce platform. Affected versions of this package are vulnerable to Incorrect Authorization in the authorization process. An attacker can gain unauthorized read and write access by bypassing security measures remotely without user...

Cross-site Scripting (XSS)

Overview magento/community-edition is a modern cloud eCommerce platform. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the form fields. An attacker can execute arbitrary JavaScript code in the context of another user's browser session by injecting malicious...

Incorrect Authorization

Overview magento/community-edition is a modern cloud eCommerce platform. Affected versions of this package are vulnerable to Incorrect Authorization via the authorization process. An attacker can gain unauthorized read and write access by bypassing security measures. Remediation Upgrade...

Open Redirect

Overview magento/community-edition is a modern cloud eCommerce platform. Affected versions of this package are vulnerable to Open Redirect via the redirect process. An attacker can redirect users to an external, attacker-controlled website by crafting a malicious URL and convincing a user to clic...