CVE-2025-34315 IPFire < v2.29 Stored XSS via Remote Syslog Server Address

IPFire versions prior to 2.29 Core Update 198 contain a stored cross-site scripting XSS vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the REMOTELOGADDR parameter when updating the remote syslog server address. When a user updates the Remote loggin...

CitadelUX 6.27 - Format String

CitadelUX 6.27 - Format String / citadelfsexp.c Citadel/UX v6.27 remote format string exploit Use: ./citadelfsexp -h options options: -h host or IP -t type of target system -l targets list -g syslog GOT address -r RET address coki@nosystem:/audit$ ./citadelfsexp -h localhost -t0 Citadel/UX v6.27...