CVE-2026-55475

Snipe-IT is an IT asset/license management system. Prior to 8.6.1, the Importer API endpoint allows a user with CSV import capabilities and a valid API key to overwrite the createdby value of an import file, allowing unauthorized modification of import ownership metadata. This issue is fixed in...

Cross site scripting

Cross-site scripting XSS vulnerability in Gurock TestRail before 3.1.3 allows remote attackers to inject arbitrary web script or HTML via the Created By field in a project activity...

CVE-2014-4857: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Gurock TestRail before 3.1.3 allows remote attackers to inject arbitrary web script or HTML via the Created By field in a project activity...

CVE-2008-4434: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in 1 uTorrent 1.7.7 build 8179 and earlier and 2 BitTorrent 6.0.3 build 8642 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long Created By field in a .torrent file...