Grokability Snipe-IT 8.0.4 - Insecure Direct Object Reference (IDOR)

Exploit Title: Grokability Snipe-IT 8.0.4 - Insecure Direct Object Reference IDOR Google Dork: N/A Date: 2025-05-02 Exploit Author: Sn1p3r-H4ck3r Siripong Jintung Vendor Homepage: https://snipeitapp.com Software Link: https://github.com/grokability/snipe-it Version: /printassigned endpoint. This...

📄 Grokability Snipe-IT 8.0.4 Insecure Direct Object Reference

Grokability Snipe-IT versions 8.0.4 and below suffer from an insecure direct object reference vulnerability. Exploit Title: Grokability Snipe-IT 8.0.4 - Insecure Direct Object Reference IDOR Google Dork: N/A Date: 2025-05-02 Exploit Author: Sn1p3r-H4ck3r Siripong Jintung Vendor Homepage:...

CVE-2025-47226

A flaw was found in the Snipe-IT component. The affected versions contain incorrect authorization protocols for accessing asset information. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising...

Exploit for Authorization Bypass Through User-Controlled Key in Snipeitapp Snipe-It

CVE-2025-47226 - IDOR Vulnerability in Snipe-IT = v8.0.4 🚨 I...

Direct Request ('Forced Browsing')

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Direct Request 'Forced Browsing' due to improper authorization checks. An attacker can access sensitive asset information without the required permissions by exploiting the...

GHSA-H3VP-QWMX-5J25 Grokability Snipe-IT has incorrect authorization for accessing asset information

Grokability Snipe-IT before 8.1.0 has incorrect authorization for accessing asset information...

Grokability Snipe-IT has incorrect authorization for accessing asset information

Grokability Snipe-IT before 8.1.0 has incorrect authorization for accessing asset information...

CVE-2025-47226

Grokability Snipe-IT before 8.1.0 has incorrect authorization for accessing asset information...

PT-2025-18923 · Unknown · Grokability Snipe-It

Name of the Vulnerable Software and Affected Versions: Grokability Snipe-IT versions prior to 8.1.0 Description: The issue concerns incorrect authorization for accessing asset information. Recommendations: For versions prior to 8.1.0, update to version 8.1.0 or later to resolve the issue...

CVE-2025-47226

Grokability Snipe-IT (Snipe-IT)

CVE-2025-47226

Grokability Snipe-IT before 8.1.0 has incorrect authorization for accessing asset information...

Snipe-IT 安全漏洞

Snipe-IT is an open source IT asset/license management system from Grokability Open Source. A security vulnerability exists in Snipe-IT versions prior to 8.1.0 that stems from improper authorization to access asset information...

CVE-2025-47226

Grokability Snipe-IT before 8.1.0 has incorrect authorization for accessing asset information...

North Korea Stole Your Job

For years, North Korea has been secretly placing young IT workers inside Western companies. With AI, their schemes are now more devious—and effective—than ever...

UK Retail Giant Co-op Shuts Down IT Systems After Cyberattack Attempt

Retailer Acts Swiftly to Limit Threat as UK Retail Sector Faces Growing Digital Risks...

CVE-2024-57375

Andamiro Pump It Up 20th Anniversary aka Double X or XX/2019 1.00.0-2.08.3 allows a physically proximate attacker to cause a denial of service application crash via certain deselect actions...

CVE-2025-39416

Cross-Site Request Forgery CSRF vulnerability in Ichi translit it! translit-it allows Stored XSS.This issue affects translit it!: from n/a through = 1.6...

CVE-2024-57375

Andamiro Pump It Up 20th Anniversary aka Double X or XX/2019 1.00.0-2.08.3 allows a physically proximate attacker to cause a denial of service application crash via certain deselect actions...

CVE-2024-57375

Andamiro Pump It Up 20th Anniversary aka Double X or XX/2019 1.00.0-2.08.3 allows a physically proximate attacker to cause a denial of service application crash via certain deselect actions...

Andamiro Pump It Up 20th Anniversary 安全漏洞

Andamiro Pump It Up 20th Anniversary is a dance simulation game by South Korean company Andamiro. A security vulnerability exists in Andamiro Pump It Up 20th Anniversary versions 1.00.0 through 2.08.3, which stems from a denial of service that may result from a specific cancel operation...