PT-2025-38503

Name of the Vulnerable Software and Affected Versions Snipe-IT versions prior to 8.1.18 Description Snipe-IT is susceptible to an unsafe deserialization issue. Recommendations Update to Snipe-IT version 8.1.18 or later...

Snipe-IT 代码问题漏洞

Snipe-IT is an open source IT asset/license management system from Grokability Open Source. A code issue vulnerability exists in Snipe-IT versions prior to 8.1.18 that stems from insecure deserialization...

Snipe-IT 跨站脚本漏洞

Snipe-IT is an open source IT asset/license management system from Grokability Open Source. A cross-site scripting vulnerability exists in Snipe-IT versions prior to 8.1.18 that stems from vulnerability to cross-site scripting attacks...

CVE-2025-59712

Snipe-IT before 8.1.18 allows XSS...

CVE-2025-59713

Snipe-IT before 8.1.18 allows unsafe deserialization...

CVE-2025-59712

Snipe-IT before 8.1.18 allows XSS...

PT-2025-38502

Name of the Vulnerable Software and Affected Versions Snipe-IT versions prior to 8.1.18 Description Snipe-IT is susceptible to a cross-site scripting XSS issue. Recommendations Update Snipe-IT to version 8.1.18 or later...

CVE-2025-59713

Snipe-IT before 8.1.18 allows unsafe deserialization...

CVE-2024-12796

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Holistic IT, Consultancy Coop. Workcube ERP allows Reflected XSS. This issue affects Workcube ERP: from V12 - V14 before Cognitive...

CVE-2024-12796 Reflected XSS in Holistic IT, Consultancy Coop.'s Workcube ERP

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Holistic IT, Consultancy Coop. Workcube ERP allows Reflected XSS.This issue affects Workcube ERP: from V12 - V14 before Cognitive...

CVE-2024-12796

CVE-2024-12796 denotes a Reflected XSS in Workcube ERP (Holistic IT, Consultancy Coop.) affecting V12–V14 before Cognitive. Root cause: improper neutralization of input during web page generation. Impact as per sources: Cross-site scripting without user interaction required (AV:N/AC:L/PR:N/UI:N/S...

CVE-2024-12796 Reflected XSS in Holistic IT, Consultancy Coop.'s Workcube ERP

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Holistic IT, Consultancy Coop. Workcube ERP allows Reflected XSS. This issue affects Workcube ERP: from V12 - V14 before Cognitive...

Malicious Package

Overview berachain-metadata is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in stringmaster-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 903d35378ef4445c057cd090e43dfa9efdd364da38c3a11b6d993d6b9c91b8b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jsonstylizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 085d3b8a0491210bdcc534a63cbf29b4342b14a727d38e4bea0c8fae2f747dd1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview internallibv819 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2025-9059 Elevation of Privileges Vulnerability in IT Management Suite

The Altiris Core Agent Updater package AeXNSC.exe is prone to an elevation of privileges vulnerability through DLL hijacking...

CVE-2025-9059 Elevation of Privileges Vulnerability in IT Management Suite

The Altiris Core Agent Updater package AeXNSC.exe is prone to an elevation of privileges vulnerability through DLL hijacking...

Malicious Package

Overview gram-utilz is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Broadcom Symantec IT Management Suite 安全漏洞

Broadcom Symantec IT Management Suite is a software from Broadcom Corporation USA that manages the configuration of repair applications and operating systems. A security vulnerability exists in Broadcom Symantec IT Management Suite that stems from vulnerability to DLL hijacking attacks that could...