Partner Software's Partner Software application and Partner Web application allows an authenticated user to add notes on the 'Notes' page when viewing a job but does not completely sanitize input, making it possible to add notes with HTML tags and JavaScript, enabling an attacker to add a note containing malicious JavaScript, leading to stored XSS (cross-site scripting).
[POC] CVE-2025-60787 — CVE-2025-60787
MotionEye v0.43.1b4 OS Command Injection
[POC] CVE-2025-60787 — CVE-2025-60787
PoC for CVE-2025-60787 - Authenticated RCE in motionEye for all versions up to 0.43.1b4 (included)
[POC] CVE-2025-60787 — CVE-2025-60787-MotionEye-RCE
Professional PoC for CVE-2025-60787: Remote Code Execution in MotionEye (<= 0.43.1b4). This exploit demonstrates an OS Command Injection vulnerability through client-side validation bypass, allowing attackers to execute arbitrary commands via configuration files.
[POC] CVE-2025-60787 — CVE-2025-60787
CVE-2025-60787 Poc - RCE - MotionEye <= 0.43.1b4
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Get alerted for CVEs like this
Register your stack and get notified within minutes when a matching CVE drops.
Start monitoring free