CVE-2025-47227

CVE-2025-47227 Exploit per CVE-2025-47227 - Reimpostazione Password ScriptCase Pre-Auth CVE-2025-47227 è un bypass dell'autenticazione pre-auth CVSS 9.8 nell'ambiente di produzione ScriptCase ≤ 9.12.006. L'endpoint login.php consente di reimpostare la password dell'amministratore senza token,...

CVE-2025-47227_CVE-2025-47228

ScriptCase - تنفيذ أوامر عن بُعد قبل المصادقة سلاسل إعادة تعيين كلمة مرور المسؤول تجاوز المصادقة، CVE-2025-47227 وحقن الأوامر تنفيذ أوامر عن بُعد بعد المصادقة، CVE-2025-47228 يتم تحقيق تنفيذ الأوامر عن بُعد قبل المصادقة من خلال ربط ثغرتين: الأولى هي القدرة على إعادة تعيين كلمة مرور مسؤول وحدة...

CVE-2022-32199

CVE-2022-32199 ScriptCase python CVE-2022-32199.py -t 127.0.0.1 -u admin -p admin -path windows/win.ini Exemplo de exclusão de arquivo no diretório raiz...

Exploit for CVE-2025-47227

cve202547227...

The vulnerability of the Production Environment module of the Netmake ScriptCase platform for developing web applications in PHP language allows a hacker to bypass the administrator password.

The vulnerability of the Production Environment module of the Netmake ScriptCase platform for developing web applications in PHP is related to errors in the representation of certain functions. Exploiting this vulnerability can allow a malicious actor to bypass the administrator’s password by...

The vulnerability of the Production Environment module of the Netmake ScriptCase platform for developing web applications in PHP language allows a hacker to bypass the administrator password.

The vulnerability of the Production Environment module of the Netmake ScriptCase platform for developing web applications in PHP is related to errors in the representation of certain functions. Exploiting this vulnerability can allow a malicious actor to bypass the administrator’s password by...

EUVD-2025-20102

Malicious code in bioql PyPI...

EUVD-2025-27635

Malicious code in bioql PyPI...

EUVD-2024-49499

Malicious code in bioql PyPI...

EUVD-2025-8249

Malicious code in bioql PyPI...

EUVD-2024-49497

Malicious code in bioql PyPI...

EUVD-2022-53407

Malicious code in bioql PyPI...

EUVD-2025-20101

Malicious code in bioql PyPI...

EUVD-2024-49498

Malicious code in bioql PyPI...

CVE-2025-8691

The WP Scriptcase plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'url' parameter in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...

CVE-2025-8691

The WP Scriptcase plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'url' parameter in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...

CVE-2025-8691 WP Scriptcase <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter

The WP Scriptcase plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'url' parameter in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...

CVE-2025-8691

The CVE-2025-8691 entry concerns WP Scriptcase for WordPress, with a Stored Cross-Site Scripting via the url parameter in all versions up to 2.0.0. The vulnerability requires authenticated access at Contributor level or higher and can cause arbitrary scripts to run in pages viewed by users. The r...

WordPress WP Scriptcase plugin <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via url Parameter vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin WP Scriptcase versions = 2.0.0...

PT-2025-37137

The WP Scriptcase plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'url' parameter in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...