71 matches found
EUVD-2025-15004
Malicious code in bioql PyPI...
EUVD-2025-18733
Malicious code in bioql PyPI...
EUVD-2025-10876
Malicious code in bioql PyPI...
EUVD-2025-28891
Malicious code in bioql PyPI...
EUVD-2025-15002
Malicious code in bioql PyPI...
EUVD-2025-10877
Malicious code in bioql PyPI...
EUVD-2025-15003
Malicious code in bioql PyPI...
CVE-2025-9847
A weakness has been identified in ScriptAndTools Real Estate Management System 1.0. Impacted is an unknown function of the file register.php. This manipulation of the argument uimage causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been made available to...
CVE-2025-9847: Unrestricted Upload of File with Dangerous Type
A weakness has been identified in ScriptAndTools Real Estate Management System 1.0. Impacted is an unknown function of the file register.php. This manipulation of the argument uimage causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been made available to...
CVE-2025-9848: Execution After Redirect (EAR)
A security vulnerability has been detected in ScriptAndTools Real Estate Management System 1.0. The affected element is an unknown function of the file /admin/userlist.php. Such manipulation leads to execution after redirect. The attack can be executed remotely. The exploit has been disclosed...
CVE-2025-6329
A vulnerability was found in ScriptAndTools Real Estate Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file userdelete.php of the component User Delete Handler. The manipulation of the argument ID leads to authorization bypass. The attack m...
CVE-2025-6329
A vulnerability was found in ScriptAndTools Real Estate Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file userdelete.php of the component User Delete Handler. The manipulation of the argument ID leads to authorization bypass. The attack m...
CVE-2025-6329 ScriptAndTools Real Estate Management System User Delete userdelete.php authorization
A vulnerability was found in ScriptAndTools Real Estate Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file userdelete.php of the component User Delete Handler. The manipulation of the argument ID leads to authorization bypass. The attack m...
CVE-2025-6329
CVE-2025-6329 affects ScriptAndTools Real Estate Management System 1.0. The vulnerability lies in the User Delete Handler’s file userdelete.php, where manipulating the argument ID leads to an authorization bypass. Reports indicate remote initiation and public disclosure of the exploit. No officia...
CVE-2025-6329 ScriptAndTools Real Estate Management System User Delete userdelete.php authorization
A vulnerability was found in ScriptAndTools Real Estate Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file userdelete.php of the component User Delete Handler. The manipulation of the argument ID leads to authorization bypass. The attack m...
CVE-2025-6329: Authorization Bypass Through User-Controlled Key
A vulnerability was found in ScriptAndTools Real Estate Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file userdelete.php of the component User Delete Handler. The manipulation of the argument ID leads to authorization bypass. The attack m...
PT-2025-26296 · Scriptandtools · Scriptandtools Real Estate Management System
Name of the Vulnerable Software and Affected Versions: ScriptAndTools Real Estate Management System version 1.0 Description: A critical issue affects the unknown processing of the file userdelete.php of the component User Delete Handler in ScriptAndTools Real Estate Management System. The...
CVE-2025-5128
CVE-2025-5128 refers to ScriptAndTools Real-Estate-website-in-PHP v1.0. The issue is an SQL injection in the Admin Login Panel via the Password parameter in the /admin/ path, enabling remote exploitation. Public disclosure is noted, and vendor response is absent. Multiple connected sources corrob...
PT-2025-22843 · Unknown · Scriptandtools Real-Estate-Website-In-Php
Name of the Vulnerable Software and Affected Versions: ScriptAndTools Real-Estate-website-in-PHP version 1.0 Description: A critical vulnerability was found in the Admin Login Panel of the ScriptAndTools Real-Estate-website-in-PHP. The manipulation of the Password argument leads to SQL injection...
CVE-2025-5128: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in ScriptAndTools Real-Estate-website-in-PHP 1.0. Affected is an unknown function of the file /admin/ of the component Admin Login Panel. The manipulation of the argument Password leads to sql injection. It is possible to launch the...