128 matches found
CVE-2022-32199
CVE-2022-32199 ScriptCase python CVE-2022-32199.py -t 127.0.0.1 -u admin -p admin -path windows/win.ini 删除根目录中文件的示例...
CVE-2025-47227_CVE-2025-47228
ScriptCase - 预认证远程命令执行 链式利用管理员密码重置（认证绕过，CVE-2025-47227）与 shell 注入（认证后远程命令执行，CVE-2025-47228） 预认证远程命令执行通过串联两个漏洞实现：第一个是在特定条件下重置生产控制台管理员密码的能力，第二个是连接功能中一个简单的认证后远程命令执行，用户输入被直接拼接至 ssh 系统命令。 依赖要求 该漏洞利用脚本所需的第三方 Python 依赖可通过以下任一命令安装： root@kitploit: pip - universal pip3 install Pillow pytesseract requests...
CVE-2025-47227
CVE-2025-47227 CVE-2025-47227 漏洞利用 - ScriptCase 密码重置（预认证） CVE-2025-47227 是一个 预认证 认证绕过漏洞（CVSS 9.8），影响 ScriptCase Production Environment ≤ 9.12.006。login.php 端点允许在没有令牌、邮件验证或身份验证的情况下重置管理员密码——仅需一个 4 字母 CAPTCHA（轻易可解）和一个包含 nmaction=changepass 的 POST 请求即可。 当与 CVE-2025-47228 （SSH...
Exploit for CVE-2025-47227
cve202547227...
The vulnerability of the Production Environment module of the Netmake ScriptCase platform for developing web applications in PHP language allows a hacker to bypass the administrator password.
The vulnerability of the Production Environment module of the Netmake ScriptCase platform for developing web applications in PHP is related to errors in the representation of certain functions. Exploiting this vulnerability can allow a malicious actor to bypass the administrator’s password by...
The vulnerability of the Production Environment module of the Netmake ScriptCase platform for developing web applications in PHP language allows a hacker to bypass the administrator password.
The vulnerability of the Production Environment module of the Netmake ScriptCase platform for developing web applications in PHP is related to errors in the representation of certain functions. Exploiting this vulnerability can allow a malicious actor to bypass the administrator’s password by...
EUVD-2025-20102
Malicious code in bioql PyPI...
EUVD-2025-27635
Malicious code in bioql PyPI...
EUVD-2024-49499
Malicious code in bioql PyPI...
EUVD-2025-8249
Malicious code in bioql PyPI...
EUVD-2022-53407
Malicious code in bioql PyPI...
EUVD-2024-49497
Malicious code in bioql PyPI...
EUVD-2025-20101
Malicious code in bioql PyPI...
EUVD-2024-49498
Malicious code in bioql PyPI...
CVE-2025-8691
The WP Scriptcase plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'url' parameter in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...
CVE-2025-8691
The WP Scriptcase plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'url' parameter in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...
CVE-2025-8691 WP Scriptcase <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter
The WP Scriptcase plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'url' parameter in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...
CVE-2025-8691
The CVE-2025-8691 entry concerns WP Scriptcase for WordPress, with a Stored Cross-Site Scripting via the url parameter in all versions up to 2.0.0. The vulnerability requires authenticated access at Contributor level or higher and can cause arbitrary scripts to run in pages viewed by users. The r...
WordPress WP Scriptcase plugin <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via url Parameter vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin WP Scriptcase versions = 2.0.0...
PT-2025-37137
The WP Scriptcase plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'url' parameter in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...