Photo Fusion 1.0 Cross Site Scripting

Exploit Title: Photo Fusion - Free Stock Photos Script - Xss Google Dork: N/A Date: 2017/31/12 Exploit Author: ShanoWeb Author Mail : MrdotNet2NetatGmaildotcom Vendor Homepage: https://codecanyon.net/user/teamworktec Software Buy:...

Default credentials

Laravel 5.4.x before 5.4.22 does not properly constrain the host portion of a password-reset URL, which makes it easier for remote attackers to conduct phishing attacks by specifying an attacker-controlled host...