MAL-006

MAL-006: XML External Entity в "Try It" в WSO2 ESB В инструменте "Try It" в WSO2 ESB была обнаружена атака типа "XML External Entity" XXE, основанная на ошибках. Почему нет CVE? Поставщик ответил, что "Try it рекомендуется отключать в производственной среде", и никакого публичного раскрытия не...

Barco/AWIND OEM Presentation Platform - Remote Command Injection

The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pr...

die-python

DetectItEasy-Python Нативные привязки для Python 3.11+ к Detect-It-Easy от @horsicq Установка Из PIP Самый простой и рекомендуемый способ — установка через pip. pip install die-python С помощью Git git clone https://github.com/elastic/die-python cd die-python Установите Qt в каталог build. Его...

CVE-2025-64027

Informations sur le produit Snipe-IT est un système de gestion d'actifs informatique gratuit et open-source FOSS construit sur Laravel. Il offre le suivi des actifs matériels, la gestion des licences logicielles, les accessoires et les fonctionnalités d'inventaire des consommables pour les équipe...

NPM: markdown-it linkify: true has two quadratic paths, so a few hundred KB of markdown blocks the event loop for tens of seconds

NPM: markdown-it linkify: true has two quadratic paths, so a few hundred KB of markdown blocks the event loop for tens of seconds vulnerability discovered by ? in WordPress Npm markdown-it versions 14.3.1...

markdown-it linkify: true has two quadratic paths, so a few hundred KB of markdown blocks the event loop for tens of seconds

Summary Two independent quadratic paths in the linkify: true handling. Both are in markdown-it's own code rather than in linkify-it, which stays linear on both payloads. src/rulescore/linkify.ts calls arrayReplaceAt once per linkified text token, and that rebuilds the whole children array each...

CVE-2025-47226

CVE-2025-47226 - Vulnérabilité IDOR dans Snipe-IT = v8.0.4 🚨 La vulnérabilité de Référence d'Objet Directe Non Sécurisée IDOR dans Snipe-IT permet aux utilisateurs authentifiés de voir les informations d'actifs d'autres départements en manipulant locationid. ✍️ Découvert par Siripong Jintung...

CVE-2023-20198

CVE-2023-20198 Script de vérification pour CVE-2023-20198 basé sur : https://blog.talosintelligence.com/active-exploitation-of-cisco-ios-xe-software/ Incluant la mise à jour où il y a un en-tête Authorization pour vérifier l'implant connu. !! Mis à jour pour rechercher un implant amélioré Le scri...

CLSA-2026-1790598013 TuxCare security update for markdown-it (1 CVE)

TuxCare rebuilt markdown-it to address 1 CVE. Fixed in 13.0.2-tuxcare.2...

CVE-2025-50881

CVE-2025-50881 : Exécution de code à distance dans API Use it Flow via moniteur.php Identifiant: CVE-2025-50881 Produit concerné : API Use it Flow Version 8.2.0 Rev 15851, Version 9.2.0 Rev 18093 Éditeur : https://www.tenorsolutions.com anciennement https://api-sas.fr/ Composants concernés :...

CVE-2025-15602-PoC

CVE-2025-15602-PoC CVE-2025-15602-PoC est une preuve de concept de la vulnérabilité CVE-2025-15602 dans Snipe-IT. Un script pour lister tous les utilisateurs et un script pour prendre le contrôle d'un compte superadmin. Contexte Un utilisateur a seulement le droit de modifier les utilisateurs, il...

CLSA-2026-1790520316 TuxCare security update for linkify-it (1 CVE)

TuxCare rebuilt linkify-it to address 1 CVE. Fixed in 2.2.0-tuxcare.1...

qub-network-security-cve-2023-20198

🛡️ qub-network-security-cve-2023-20198 Analyse, détection et atténuation de l'exploitation de CVE-2023-20198 dans Cisco IOS XE 📘 Queen's University Belfast – CSC3064 Évaluation de la sécurité réseau 📋 Présentation de l'évaluation Ce projet consiste à analyser les fichiers PCAP fournis par Fox-IT...

Cross-site Scripting (XSS)

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Cross-site Scripting XSS through the API's handling of uploaded XML files, which are rendered inline without proper sanitization. An attacker can execute arbitrary JavaScrip...

Snipe-IT: Stored XSS via Inline XML Rendering in the Uploaded Files API

Snipe-IT's uploaded-files API accepts XML documents and later serves them inline without applying the safe-inline allowlist used by the equivalent web controller. An authenticated user who can attach files to a supported object can upload an XSLT stylesheet and an XML document that references it...

GHSA-396X-XMVH-P563 Snipe-IT: Stored XSS via Inline XML Rendering in the Uploaded Files API

Snipe-IT's uploaded-files API accepts XML documents and later serves them inline without applying the safe-inline allowlist used by the equivalent web controller. An authenticated user who can attach files to a supported object can upload an XSLT stylesheet and an XML document that references it...

Cross-site Scripting (XSS)

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the AssetPresenter process. An attacker can execute arbitrary scripts in the context of a higher-privileged user's session by injecting maliciou...

Snipe-IT: Stored XSS via Custom Field name in asset-list column headers

Impact A user with the "customfields.create" permission can store HTML/JS in a Custom Field name, which is later rendered as an asset-list column title WITHOUT escaping at app/Presenters/AssetPresenter.php line 364 'title' = $field-name and injected into the table header by the bundled...

GHSA-P9H3-GVPQ-5539 Snipe-IT: Stored XSS via Custom Field name in asset-list column headers

Impact A user with the "customfields.create" permission can store HTML/JS in a Custom Field name, which is later rendered as an asset-list column title WITHOUT escaping at app/Presenters/AssetPresenter.php line 364 'title' = $field-name and injected into the table header by the bundled...

CVE-2026-63498

Snipe-IT is an IT asset/license management system. Prior to 8.7.0, the uploaded-files API endpoint GET /api/v1/objecttype/id/files/fileid allows an authenticated user with file-management access to upload XML and XSLT attachments and request them with the inline=true parameter. The...