Critical ScriptCase Flaws Allow Remote Code Execution and Server Takeover

**ScriptCase prod console critical vulnerabilities (CVE-2025-47227 / CVE-2025-47228):** Researchers disclosed an authentication bypass in the password reset flow and a command-injection in the SSH local port forwarding feature that can be chained to achieve remote code execution as the web server user; a PoC script (with OCR-based CAPTCHA solving) automates the attack and impacted versions include Production Environment 1.0.003-build-2 and likely earlier releases, enabling full prod console compromise and credential leakage.