CVE-2025-61078: Cross-site scripting (XSS) vulnerability in Request IP form in phpIPAM v1.7.3

On the 2nd of September 2025 phpIPAM was notified regarding an XSS vulnerability which allows an authenticated attacker to craft an HTML form containing javascript pseudo protocol tags which is then shown in the Instructions area of the Request IP page of the application. Versions up to and including v1.7.3 are potentially vulnerable, and a… Continue reading CVE-2025-61078: Cross-site scripting (XSS) vulnerability in Request IP form in phpIPAM v1.7.3

Aventuri cu RFID la frecvență joasă

The English version: https://glitch0ne.com/2023/10/12/lf-rfid-shenanigans/ Disclaimer: Atacul și tehnicile despre care vă povestesc aici trebuie încercate doar pe dispozitive personale sau dispozitivele unor persoane care și-au dat acordul explicit pentru asta. Nu sunt responsabil pentru modul în care alte persoane folosesc informațiile prezentate mai jos. Mulțumesc! Fiind un mare fan al motto-ului surorii lui Dexter, "Uuu!… Continue reading Aventuri cu RFID la frecvență joasă

LF RFID Shenanigans

Versiunea în Română: https://glitch0ne.com/2023/10/12/aventuri-cu-rfid-la-frecventa-joasa/ Disclaimer: The things I'm about to tell you about should only be tried on personal devices or with the explicit consent of any targets. I'm not responsible for the malicious use of the information presented below. Thank you, and godspeed! As an avid proponent of Dee Dee's motto „Ooh! What does… Continue reading LF RFID Shenanigans