CVE-2025-13607

CVE-2025-13607 affects D-Link CCTV camera model DCS-F5614-L1 and related entries, describing unauthenticated access to camera configuration data (including account credentials) via a vulnerable URL. Connected sources consistently state missing authentication as the root cause; several enrichments...

Ship Ferry Ticket Reservation System 1.0 SQL Injection

Exploit Title: Ship Ferry Ticket Reservation System v1.0 SQL-Injection-Bypass-Authentication in /shipticketing/classes/Login.php. Author: nu11secur1ty Testing and Debugging: nu11secur1ty Date: 08.30.2021 Vendor:...

U.S. Dept Of Defense: Cross Site Scripting (XSS) – Reflected

Reflected Cross-site Scripting XSS occur when an attacker injects browser executable code within a single HTTP response.When a web application is vulnerable to this type of attack, it will pass unvalidated input sent through requests back to the client. The value of request parameter is copied in...

Colorful Blog - Persistent Cross-Site Scripting

Colorful Blog - Persistent Cross-Site Scripting Exploit Title : ----------- : Colorful Blog - Stored Cross Site Scripting Author : ----------------- : Besim Google Dork : --------- : - Date : -------------------- : 13/10/2016 Type : -------------------- : webapps Platform : --------------- : PHP...

Colorful Blog - Persistent Cross-Site Scripting

Exploit Title : ----------- : Colorful Blog - Stored Cross Site Scripting Author : ----------------- : Besim Google Dork : --------- : - Date : -------------------- : 13/10/2016 Type : -------------------- : webapps Platform : --------------- : PHP Vendor Homepage :-- : - Software link : --------...

ApPHP MicroBlog 1.0.2 - Persistent Cross-Site Scripting

ApPHP MicroBlog 1.0.2 - Persistent Cross-Site Scripting Exploit Title : ApPHP MicroBlog 1.0.2 - Stored Cross Site Scripting Author : Besim Google Dork : Date : 12/10/2016 Type : webapps Platform : PHP Vendor Homepage : - Software link : http://www.scriptdungeon.com/jump.php?ScriptID=9162...

PHP Press Release Cross Site Scripting

Exploit Title : PHP Press Release - Stored Cross Site Scripting Author : Besim Google Dork : - Date : 09/10/2016 Type : webapps Platform : PHP Vendor Homepage : http://www.pagereactions.com/product.php?pku=1 Software link : http://www.pagereactions.com/downloads/phppressrelease.zip Description :...

Ian Dunn: Google Authenticator0.6 - PHP Version Dosclosure

Hello Vulnerable File and Link : http://localhost/wordpress/wp-content/plugins/google-authenticator-per-user-prompt/views/requirements-error.php Vulnerable Link : 8 You're running version Vulnerable Code: Good Luck/...

New Relic: Vulnerable Link Leaks the User Names

Hello, Vulnerable Link: https://rpm.newrelic.com/accounts/XXXXXX/setup POC: Login to the Account. Visit the Above Link. Now, Log Out! Visit that Link Again. Here you go!!! "Display Name" is leaking in front, and the "first name" and "last name" is leaking on the right side bar. Thanks! regards,...

Vimeo: Open Redirection Security Filter bypassed

Hi, The application is vulnerable to Open Redirection using a basic filter bypass which it was using for security against open redirection. Here is the vulnerable link: https://vimeo.com/tools/edit?image=http://securityidiots.com?vimeocdn.com/.png Weakness in filter against Open Redirect.: Actual...

Zimplit CMS 3.0 - Multiple Vulnerabilities

No description provided by source. Exploit Title: Zimplit CMS multiple vulnerabilities Date: 2013 13 September Exploit Author: Yashar shahinzadeh Special thanks to Mormoroth Credit goes for: http://y-shahinzadeh.ir & ha.cker.ir Vendor Homepage: www.zimplit.com Tested on: Linux & Windows, PHP 5.3....

Hubdia: Subscribe User bug

Hi Hubdia, i found a bug in your subscribe page https://hubdia.com/ which this bug can subscribe multiple emails. Vulnerable Link: https://hubdia.com/ Proof of Concept: 1. use Live HTTP Headers firefox addon 2. change the email see in attached photo 3. submit the request in many times Thanks,...

Mail.ru: rs.mail.ru - Flash Based XSS

Hi, I found a flash based XSS in rs.mail.ru. Vulnerable link: http://rs.mail.ru/b27161485.swf?link1=javascript:alertdocument.domain Just click on the page and you will see the alert. Tested on Mozilla Firefox Regards, Florin...

Slack: open redirect in https://slack.com

Navigate to Https://slack.com append "/link?url=url=http://bing.com" or enter any website of your choice with http:// vulnerable link https://slack.com/link?url=http://bing.com notice that user is redirected to bing.com without being validated or notified...

Wordpress Plugins - SocialFit XSS Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Kevin Mitnick's website open to Cross-Site Scripting ( XSS ) vulnerability

Kevin Mitnick's website open to Cross-Site Scripting XSS vulnerability Cross-Site Scripting XSS vulnerability discovered in official website of Kevin Mitnick one of the most talented hackers, and the one one most prosecuted by the state. Mitnick's hacker handle was "Condor". He became the first...

W-CMS 2.01 Cross Site Scripting / Directory Traversal

Exploit Title: W-Cms Multiple Vulnerability Date: 2012-01-09 Author: th3.g4m30v3r Site:http://w-cms.info/ Software Link: http://code.google.com/p/wcms/ Dork: intext:"Powered by w-CMS" Version : 2.01 Tested on: Window 7 Yogesh Kashyap, shubneet goel, w4rl0ck.d0wn, Chip, VzAcnY, Razzy, Sayan, Jaggi...

Searchsecurity.techtarget.com Cross Site Scripting

WhiteHatZone Vulnerable : http://searchsecurity.techtarget.com/ Script : alert'XSS found by Girish Shrimali'; Vulnerable link : http://searchsecurity.techtarget.com/search/query?start=0&filter=1&q=%3Cscript%3Ealert%28%27XSS+found+by+Girish+Shrimali%27%29%3B%3C%2Fscript%3E Greetz : Vidit Baxi, Sum...

XSS Vulnerability in MSN.com

XSS Vulnerability in MSN.com XSS Vulnerability Cross Site Scripting in MSN discovered by TeamDX . Vulnerable Link%20;%3C/script%3E is also shown in image. Last week One of the Security Researcher "Juan Sacco runlvl" - Insecurity Research Labs expose the Cross Site vulnerability XSS in Bing.com...

PBS (Public Broadcasting Service) & Writerspace Hacked Again by Warv0x (AKA Kaihoe)

PBS Public Broadcasting Service & Writerspace Hacked Again by Warv0x AKA Kaihoe Yes ! Its True that PBS Public Broadcasting Service Hacked once again .Last time, A month before Public Broadcasting Service PBS Hacked by Lulzsec and Users data ,Database was Leaked and then Lulzsec claim that PSB.or...