CVE-2025-1071

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WatchGuard Fireware OS allows Stored XSS via the spamBlocker module. This vulnerability requires an authenticated administrator session to a locally managed Firebox.This issue affects Firewa...

CVE-2025-1239 WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Blocked Sites List

A stored cross-site scripting XSS vulnerability exists in the management interface of WatchGuard Firebox appliances via the Blocked Sites list. An authenticated remote attacker with administrator privileges could exploit this vulnerability to execute arbitrary JavaScript code in the Firebox...

phpBP <= RC3 (2.204) (sql/cmd) Remote Code Execution Exploit

No description provided by source. ? // //Kacper & str0ke Settings $exploitname = "phpBP = RC3 2.204 sql/cmd Remote Code Execution Exploit"; $scriptname = "phpBP RC3 2.204"; $scriptsite = "http://www.phpbp.com/"; $dork = 'Silnik strony jest chroniony prawami autorskimi PHP BP Team'; //to work...

phpBP <= RC3 (2.204) (sql/cmd) Remote Code Execution Exploit

Exploit for unknown platform in category web applications ============================================================ phpBP = RC3 2.204 sql/cmd Remote Code Execution Exploit ============================================================ ? // //Kacper & str0ke Settings $exploitname = "phpBP = RC3...