EUVD-2025-30205

Malicious code in bioql PyPI...

EUVD-2025-30207

Malicious code in bioql PyPI...

CVE-2025-59712

Snipe-IT before 8.1.18 allows XSS...

GHSA-PHWJ-FGCH-XVRJ Snipe-IT allows unsafe deserialization

Snipe-IT before 8.1.18 allows unsafe deserialization...

Deserialization of Untrusted Data

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the deserialization process. An attacker can execute arbitrary code or manipulate application data by providing crafted serialized...

Snipe-IT allows unsafe deserialization

Snipe-IT before 8.1.18 allows unsafe deserialization...

Snipe-IT allows XSS

Snipe-IT before 8.1.18 allows XSS...

GHSA-C9WP-PR7F-HFQM Snipe-IT allows XSS

Snipe-IT before 8.1.18 allows XSS...

CVE-2025-59713

Snipe-IT before 8.1.18 allows unsafe deserialization...

CVE-2025-59713

Snipe-IT before 8.1.18 allows unsafe deserialization...

CVE-2025-59712

Snipe-IT before 8.1.18 allows XSS...

CVE-2025-59713

CVE-2025-59713 affects Snipe-IT before 8.1.18 and is caused by unsafe deserialization. Public references (Red Hat, OSV, CVE listings) and a PoC/exploit repository indicate potential exploitation paths and cross-reference CVE-2025-59712 as well. The vulnerability impacts confidentiality and integr...

CVE-2025-59713

Snipe-IT before 8.1.18 allows unsafe deserialization...

CVE-2025-59712

Snipe-IT before 8.1.18 allows XSS...

CVE-2025-59713

Snipe-IT before 8.1.18 allows unsafe deserialization...

Snipe-IT 跨站脚本漏洞

Snipe-IT is an open source IT asset/license management system from Grokability Open Source. A cross-site scripting vulnerability exists in Snipe-IT versions prior to 8.1.18 that stems from vulnerability to cross-site scripting attacks...

CVE-2025-59712

Snipe-IT before 8.1.18 allows XSS...

CVE-2023-51521

Cross-Site Request Forgery CSRF vulnerability in ExpressTech Quiz And Survey Master.This issue affects Quiz And Survey Master: from n/a through 8.1.18...

CVE-2023-51521 WordPress Quiz And Survey Master plugin <= 8.1.18 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in ExpressTech Quiz And Survey Master.This issue affects Quiz And Survey Master: from n/a through 8.1.18...

PT-2024-14175 · Expresstech · Expresstech Quiz/Survey Master

Name of the Vulnerable Software and Affected Versions: ExpressTech Quiz And Survey Master versions 8.1.18 and earlier Description: A Cross-Site Request Forgery CSRF issue affects ExpressTech Quiz And Survey Master. This issue allows an attacker to perform unintended actions on a user's behalf...