11 matches found
CVE-2025-12509
On a client with an admin user, a GlobalShipping script can be implemented. The script could later be executed on the BRAIN2 server with administrator rights...
CVE-2025-12509
On a client with an admin user, a GlobalShipping script can be implemented. The script could later be executed on the BRAIN2 server with administrator rights...
CVE-2025-12509 Scripts for the module Global_Shipping executable on BRAIN2 Server
On a client with an admin user, a GlobalShipping script can be implemented. The script could later be executed on the BRAIN2 server with administrator rights...
CVE-2025-12509 Scripts for the module Global_Shipping executable on BRAIN2 Server
On a client with an admin user, a GlobalShipping script can be implemented. The script could later be executed on the BRAIN2 server with administrator rights...
CVE-2025-12509
CVE-2025-12509 affects Bizerba BRAIN2. A Global_Shipping script can be introduced by an admin on a client and then executed on the BRAIN2 server with administrator rights, potentially giving full administrative control of the server. Root cause: execution of a privileged script across components ...
EUVD-2025-18870
Malicious code in bioql PyPI...
CVE-2025-6512
On a client with a non-admin user, a script can be integrated into a report. The reports could later be executed on the BRAIN2 server with administrator rights...
CVE-2025-6512
On a client with a non-admin user, a script can be integrated into a report. The reports could later be executed on the BRAIN2 server with administrator rights...
CVE-2025-6512
CVE-2025-6512 affects BRAIN2 (PT-Security entry PT-2025-26595) with BRAIN2 versions 0.0–3.05 vulnerable to code injected via report scripts by non-admin users. The script in a report can be executed on the BRAIN2 server with administrator rights, enabling potential code injection. Root cause: imp...
CVE-2025-6512 Scripts within reports executable on BRAIN2 Server
On a client with a non-admin user, a script can be integrated into a report. The reports could later be executed on the BRAIN2 server with administrator rights...
CVE-2025-6512 Scripts within reports executable on BRAIN2 Server
On a client with a non-admin user, a script can be integrated into a report. The reports could later be executed on the BRAIN2 server with administrator rights...