Researcher discovers Zero-Day Vulnerability in Wordpress Plugin of Exploit DB

The young security researcher paulos yibleo discovered a remote vulnerability in the offensive security exploit-db community.

The vulnerability occured in the blog service of the community. The offensive security team installed an application plugin for wordpress called "wp-rocket". The "wp-rocket" (wp-rocket.me) plugin is well known for unsecure programming mythology.

The security vulnerability that is remotly exploitable was located in the /wp-content/wprocketfolder/inc/front/process.php application file. The process.php file allows to request without authorization (pre-auth) $host controlled inputs.

Magento split up the Bug Bounty Program of Ebay - Begin 1st May

Today in the morning we received a mail message by the representatives of the magento bug bounty program.

The mail is send to all active security researchers in the official ebay inc and magento bug bounty program.

In the message the magento team announces that the active researchers should send the new reports (begin 1st may) to the official magento bug bounty source. Reason for that is a cooperative split of both programs.

"Hello Magento Researchers, beginning on May 1, Magento submissions should be directed to security@magento.com . For messages with sensitive content, please encrypt your email with our encryption key which can be found on the security center page, https://magento.com/security.”