CVE-2022-32199

CVE-2022-32199 ScriptCase python CVE-2022-32199.py -t 127.0.0.1 -u admin -p admin -path windows/win.ini Example of deleting file in the root directory...

CVE-2025-47227_CVE-2025-47228

ScriptCase - Pre-Authenticated Remote Command Execution Chaining administrator's password reset authentication bypass, CVE-2025-47227 and shell injection authenticated remote command execution, CVE-2025-47228 Pre-authenticated remote command execution is achieved by chaining two vulnerabilities:...

CVE-2025-47227

CVE-2025-47227 Exploit pour CVE-2025-47227 - Réinitialisation de mot de passe ScriptCase Pre-Auth CVE-2025-47227 est un contournement d'authentification pre-auth CVSS 9.8 dans l'environnement de production ScriptCase ≤ 9.12.006. Le point de terminaison login.php permet de réinitialiser le mot de...

Exploit for CVE-2025-47227

cve202547227...

The vulnerability of the Production Environment module of the Netmake ScriptCase platform for developing web applications in PHP language allows a hacker to bypass the administrator password.

The vulnerability of the Production Environment module of the Netmake ScriptCase platform for developing web applications in PHP is related to errors in the representation of certain functions. Exploiting this vulnerability can allow a malicious actor to bypass the administrator’s password by...

The vulnerability of the Production Environment module of the Netmake ScriptCase platform for developing web applications in PHP language allows a hacker to bypass the administrator password.

The vulnerability of the Production Environment module of the Netmake ScriptCase platform for developing web applications in PHP is related to errors in the representation of certain functions. Exploiting this vulnerability can allow a malicious actor to bypass the administrator’s password by...

EUVD-2025-20102

Malicious code in bioql PyPI...

EUVD-2025-27635

Malicious code in bioql PyPI...

EUVD-2024-49499

Malicious code in bioql PyPI...

EUVD-2025-8249

Malicious code in bioql PyPI...

EUVD-2022-53407

Malicious code in bioql PyPI...

EUVD-2024-49498

Malicious code in bioql PyPI...

EUVD-2024-49497

Malicious code in bioql PyPI...

EUVD-2025-20101

Malicious code in bioql PyPI...

CVE-2025-8691

The WP Scriptcase plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'url' parameter in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...

CVE-2025-8691

The WP Scriptcase plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'url' parameter in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...

CVE-2025-8691 WP Scriptcase <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter

The WP Scriptcase plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'url' parameter in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...

CVE-2025-8691

The CVE-2025-8691 entry concerns WP Scriptcase for WordPress, with a Stored Cross-Site Scripting via the url parameter in all versions up to 2.0.0. The vulnerability requires authenticated access at Contributor level or higher and can cause arbitrary scripts to run in pages viewed by users. The r...

WordPress WP Scriptcase plugin <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via url Parameter vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin WP Scriptcase versions = 2.0.0...

CVE-2025-8691: Improper Neutralization of Input During Web Page Generation

The WP Scriptcase plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'url' parameter in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...