Lucene search
+L

1531 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/05 12:00 a.m.•3 views

CVE-2025-63601: Unrestricted Upload of File with Dangerous Type

Snipe-IT before version 8.3.3 contains a remote code execution vulnerability that allows an authenticated attacker to upload a malicious backup file containing arbitrary files and execute system commands...

9.9CVSS6.5AI score0.00644EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/11/05 12:00 a.m.•7 views

CVE-2025-63601

Snipe-IT before version 8.3.3 contains a remote code execution vulnerability that allows an authenticated attacker to upload a malicious backup file containing arbitrary files and execute system commands...

6.5AI score0.00644EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/11/05 12:00 a.m.•16 views

EUVD-2025-37899

Snipe-IT before version 8.3.3 contains a remote code execution vulnerability that allows an authenticated attacker to upload a malicious backup file containing arbitrary files and execute system commands...

9.9CVSS7.8AI score0.00644EPSS
SaveExploits0References3
CVE
CVE
•added 2025/11/05 12:00 a.m.•55 views

CVE-2025-63601

The asset management system Snipe-IT is vulnerable to Remote Code Execution (RCE) in versions prior to 8.3.3 . The root cause is an unrestricted upload of files with dangerous types via the snipeit:restore command, which allows an authenticated attacker to upload a specially crafted backup file. ...

9.9CVSS6.5AI score0.00644EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2025/11/05 12:00 a.m.•13 views

CVE-2025-63601

Snipe-IT before version 8.3.3 contains a remote code execution vulnerability that allows an authenticated attacker to upload a malicious backup file containing arbitrary files and execute system commands...

9.9CVSS8.3AI score
SaveExploits0References6
Veracode
Veracode
•added 2025/11/04 7:51 a.m.•19 views

Deserialization Of Untrusted Data

Snipe-IT is vulnerable to Deserialization Of Untrusted Data. The vulnerability is due to improper handling of untrusted serialized data, which allows an attacker to supply malicious objects that can be deserialized to execute arbitrary code or manipulate application logic...

8.1CVSS6.8AI score0.00382EPSS
SaveExploits1References3Affected Software1
Veracode
Veracode
•added 2025/11/04 7:37 a.m.•13 views

Cross-site Scripting (XSS)

Snipe-IT is vulnerable to Cross-site Scripting XSS. The vulnerability is due to improper sanitization of user-supplied input, which allows an attacker to inject and execute arbitrary web scripts in the context of a victim’s browser...

6.4CVSS6.5AI score0.00261EPSS
SaveExploits1References3Affected Software1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2021-2162

Malware in sbrugna...

6.1CVSS6.1AI score0.0079EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2021-2297

Malware in sbrugna...

4.3CVSS5.7AI score0.00443EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2021-2498

Malware in sbrugna...

4.3CVSS4.6AI score0.00721EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2021-2278

Malware in sbrugna...

5.4CVSS5.7AI score0.00538EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2021-2332

Malware in sbrugna...

8CVSS6.8AI score0.00755EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2021-2448

Malware in sbrugna...

6.3CVSS6.5AI score0.00656EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•23 views

EUVD-2021-2443

Malware in sbrugna...

7.2CVSS6.1AI score0.00923EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2021-2585

Malware in sbrugna...

6.4CVSS6.7AI score0.0079EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2021-2184

Malware in sbrugna...

6.8CVSS6.5AI score0.00829EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2021-2203

Malware in sbrugna...

8.8CVSS6.2AI score0.00544EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•9 views

EUVD-2022-7481

Malicious code in bioql PyPI...

5.4CVSS5.6AI score0.00494EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•22 views

EUVD-2023-2807

Malicious code in bioql PyPI...

5.5CVSS5.5AI score0.00609EPSS
SaveExploits4References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2022-6455

Malicious code in bioql PyPI...

4.8CVSS5.1AI score0.00683EPSS
SaveExploits1References3
Rows per page
Query Builder