/
initial_access_vector:exploit_public_facing × latest_source_host:bleepingcomputer.com × criticity:high × limpar

Resultados

2 casos · pág. 1/1

bleepingcomputer.com · high

Critical BlockStrap flaw (CVE-2026-103849) in Magento and Adobe Commerce enables PHP code execution; exploitation expected

Sansec warns that a maximum-severity flaw, CVE-2026-103849 (dubbed BlockStrap), in Magento Open Source and Adobe Commerce could allow attackers to execute arbitrary PHP code on store servers. No in-the-wild exploitation has been observed yet, but Sansec identified four potential attack paths in under 24 hours and expects mass exploitation…

CVE-2026-103849 e-commerce retail
bleepingcomputer.com · · 3 fontes · 3 atualizações high

Railway PaaS breach exposes customer environment variables and secrets; deployments paused, wallets drained, all users told to rotate keys

Railway, a Platform-as-a-Service provider, disclosed "anomalous activity" on the systems that store customer environment variables. An unauthorized third party may have accessed encrypted variables and, in some cases, obtained the decrypted contents (thehackernews.com, techcrunch.com, bleepingcomputer.com). Railway detected the activity e…

technology cloud