it-schulungen.com Cross Site Scripting vulnerability OBB-2375410

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-0611

Missing Authorization in Packagist snipe/snipe-it prior to 5.3.11...

CVE-2022-0611

Missing Authorization in Packagist snipe/snipe-it prior to 5.3.11...

Authorization

Missing Authorization in Packagist snipe/snipe-it prior to 5.3.11...

Snipe-IT Information Disclosure Vulnerability

Snipe-IT is an open source IT asset/license management system. snipe-it suffers from an information disclosure vulnerability that stems from the existence of two different responses for unregistered and registered email addresses in the password reset page. An attacker could use this vulnerabilit...

An unspecified vulnerability exists in snipe-it (CNVD-2022-18045)

Snipe-IT is an open source IT asset/license management system. security vulnerability exists in Packagist snipe/snipe-it versions prior to 5.3.9, which stems from improper privilege management. No details of the vulnerability are currently available...

CVE-2022-0611

CVE-2022-0611 concerns an elevation of privilege in the open-source asset management solution Snipe-IT . The vulnerability stems from missing/ improper authorization (privilege management) in versions prior to 5.3.11 , allowing an unprivileged user to perform maintenance-related actions for asset...

CVE-2022-0611 Missing Authorization in snipe/snipe-it

Missing Authorization in Packagist snipe/snipe-it prior to 5.3.11...

GHSA-QPV2-JXC7-3638 Exposure of Sensitive Information in snipe/snipe-it

Observable Discrepancy in Packagist snipe/snipe-it prior to v5.3.10...

Exposure of Sensitive Information in snipe/snipe-it

Observable Discrepancy in Packagist snipe/snipe-it prior to v5.3.10...

GHSA-V6VG-PXVV-G5CQ Improper Privilege Management in Snipe-IT

Snipe-IT prior to 5.3.9 is vulnerable to improper privilege management. A user who does not have access to the supplier module may view supplier content...

Improper Privilege Management in Snipe-IT

Snipe-IT prior to 5.3.9 is vulnerable to improper privilege management. A user who does not have access to the supplier module may view supplier content...

snipe-it 安全漏洞

Snipe-IT is an open source IT asset/license management system. snipe-it versions prior to 5.3.11 contain an elevation of privilege vulnerability that stems from improper privilege management in the software. An attacker could exploit the vulnerability to cause a non-privileged user to create...

PT-2022-13297 · Snipe-It · Snipe-It

Name of the Vulnerable Software and Affected Versions: Snipe-IT versions prior to 5.3.11 Description: The issue concerns improper privilege management, allowing an unprivileged user to create maintenance for an asset. This can be exploited due to missing authorization in the software. Version...

CVE-2022-0579

Missing Authorization in Packagist snipe/snipe-it prior to 5.3.9...

CVE-2022-0579

Missing Authorization in Packagist snipe/snipe-it prior to 5.3.9...

CVE-2022-0579 Missing Authorization in snipe/snipe-it

Missing Authorization in Packagist snipe/snipe-it prior to 5.3.9...

CVE-2022-0579

The CVE-2022-0579 entry concerns Snipe-IT (Packagist snipe/snipe-it) before version 5.3.9. Several connected sources confirm an improper privilege management flaw that allows a user without access to the supplier module to view supplier content, indicating a privilege-related exposure rather than...

CVE-2022-0579 Missing Authorization in snipe/snipe-it

Missing Authorization in Packagist snipe/snipe-it prior to 5.3.9...

Upcoming Speaking Engagements

This is a current list of where and when I am scheduled to speak: I’m speaking at IT-S Now 2022 in Vienna on June 2, 2022. I’m speaking at the 14th International Conference on Cyber Conflict, CyCon 2022, in Tallinn, Estonia on June 3, 2022. I’m speaking at the RSA Conference 2022 in San Francisco...