🚨Unauthenticated Magento XXE | CVE-2024-34102 | Bug Bounty POC | Brut Security

🚨Magento XXE CVE-2024-34102: A newly discovered vulnerability
dubbed “CosmicSting” jeopardizes millions of online stores
built on Adobe Commerce and Magento platforms.
⚠CosmicSting enables attackers to gain unauthorized access
to sensitive files, including those containing passwords.
When combined with a recent Linux bug (CVE-2024-2961),
the vulnerability can be escalated to remote code execution.
📢Dorks:
Hunter: product.name="Adobe Magento"
FOFA: app="Adobe-Magento"
SHODAN: http.html:"magento-template"
📝POC & Payload: t.me/brutsecur...
⚠Tool Made By: D. Sanjai Kumar & Gokul V
.
.
.
.
.
.
#cybersecurity #cybersecurityawareness #security #informationsecurity #hacker #datasecurity #hacking #threat #infosecurity #technology #cloud #hacks #computerscience #informationtechnology #social #tech #hacked #android #awscloud #aws

[@brutsecurity]

poc: t.me/brutsecurity/590

[@technicalskies9084]

In the last part you did -> poll now, 😅 actually i àm à newbie could you please tell what was your last step, what did you did....

[@brutsecurity]

There is a full video in channel please check it out and join telegram for further communications.

[@chaplinburp1731]

This Is Song?

[@brutsecurity]

if you think so.

[@chuyenngo4270]

If you meant to ask what song it was , its kerosene slowed