Magento XXE CVE-2024-34102

🔥Magento XXE CVE-2024-34102: A newly discovered vulnerability
dubbed “CosmicSting” jeopardizes millions of online stores
built on Adobe Commerce and Magento platforms.
⚠️CosmicSting enables attackers to gain unauthorized access
to sensitive files, including those containing passwords.
When combined with a recent Linux bug (CVE-2024-2961),
the vulnerability can be escalated to remote code execution.
📣Dorks:
Hunter: product.name="Adobe Magento"
FOFA: app="Adobe-Magento"
SHODAN: http.html:"magento-template"
🔴POC: github.com/th3...
⚠️Tool Made By: D. Sanjai Kumar & Gokul V
#cybersecurity #cybersecurityawareness #security #informationsecurity #hacker #datasecurity #hacking #threat #infosecurity #technology #cloud #hacks #computerscience #informationtechnology #social #tech #hacked #android #bugbounty #OWASP #subdomain
ncybersecurity.com
[phone]
/ nationalcybers1
/ national-cyber-securit...
Services: [e-mail]
Training: [e-mail]
National Cyber Security Services

[@7i-]

Nice ❤