1531 matches found
CVE-2025-59712
Snipe-IT before 8.1.18 allows XSS...
CVE-2025-59713
CVE-2025-59713 affects Snipe-IT before 8.1.18 and is caused by unsafe deserialization. Public references (Red Hat, OSV, CVE listings) and a PoC/exploit repository indicate potential exploitation paths and cross-reference CVE-2025-59712 as well. The vulnerability impacts confidentiality and integr...
CVE-2025-59712
Snipe-IT before 8.1.18 allows XSS...
CVE-2025-59713
Snipe-IT before 8.1.18 allows unsafe deserialization...
Snipe-IT 跨站脚本漏洞
Snipe-IT is an open source IT asset/license management system from Grokability Open Source. A cross-site scripting vulnerability exists in Snipe-IT versions prior to 8.1.18 that stems from vulnerability to cross-site scripting attacks...
Snipe-IT 代码问题漏洞
Snipe-IT is an open source IT asset/license management system from Grokability Open Source. A code issue vulnerability exists in Snipe-IT versions prior to 8.1.18 that stems from insecure deserialization...
CVE-2025-59713
Snipe-IT before 8.1.18 allows unsafe deserialization...
CVE-2025-59712
CVE-2025-59712 affects Snipe-IT prior to 8.1.18 where an XSS vulnerability exists due to improper sanitization of the User-Agent field when a user updates their profile. The issue enables injection of arbitrary JavaScript in pages that render the user reports/activity data. A PoC/exploit exists d...
CVE-2025-59712
Snipe-IT before 8.1.18 allows XSS...
CVE-2024-51094
An issue in Snipe-IT v.7.0.13 build 15514 allows a low-privileged attacker to modify their profile name and inject a malicious payload into the "Name" field. When an administrator later accesses the People Management page, exports the data as a CSV file, and opens it, the injected payload will be...
CVE-2024-51093
Stored Cross-Site Scripting XSS vulnerability in Snipe-IT - v7.0.13 allows an attacker to upload a malicious XML file containing JavaScript code. This can lead to privilege escalation when the payload is executed, granting the attacker super admin permissions within the Snipe-IT system...
CVE-2022-2997
Session Fixation in GitHub repository snipe/snipe-it prior to 6.0.10...
CVE-2022-0579
Missing Authorization in Packagist snipe/snipe-it prior to 5.3.9...
CVE-2022-32061
An arbitrary file upload vulnerability in the Select User function under the People Menu component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted file...
CVE-2022-44381
Snipe-IT through 6.0.14 allows attackers to check whether a user account exists because of response variations in a /password/reset request...
CVE-2022-44380
Snipe-IT before 6.0.14 is vulnerable to Cross Site Scripting XSS for View Assigned Assets...
CVE-2022-32060
An arbitrary file upload vulnerability in the Update Branding Settings component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted file...
CVE-2022-1511
Missing Authorization in GitHub repository snipe/snipe-it prior to 5.4.4...