📦 Dcscope

Multiple SQL injection vulnerabilities in EasyVirt DCScope and CO2Scope allow remote unauthenticated attackers to execute arbitrary SQL commands via login parameters. This affects all users running vu...

This is a critical code injection vulnerability in EasyVirt DCScope and CO2Scope that allows remote unauthenticated attackers to execute arbitrary code via the /api/license/sendlicense/ endpoint. Atta...

This vulnerability allows remote attackers to generate valid JWT tokens using a hardcoded weak secret, enabling privilege escalation in affected EasyVirt products. Attackers can access sensitive infor...

This CVE describes multiple incorrect access control vulnerabilities in EasyVirt DCScope and CO2Scope management software. Remote authenticated attackers with low privileges can perform administrative...

Multiple SQL injection vulnerabilities in EasyVirt DCScope and CO2Scope allow authenticated attackers with low privileges to manipulate user, group, and role management functions. Attackers can add ad...