CVE-2025-47226

CVE-2025-47226 - IDOR Vulnerability in Snipe-IT = v8.0.4 🚨 Insecure Direct Object Reference IDOR vulnerability in Snipe-IT allows authenticated users to view asset information from other departments by tampering with locationid. ✍️ Discovered By Siripong Jintung GitHub: Sn1p3r-H4ck3r Linkedin:...

Authorization Bypass Through User-Controlled Key

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key in the printassigned and printallassigned endpoints due to missing per-model authorization checks. An attacker can retrieve...

CVE-2026-86761: Authorization Bypass Through User-Controlled Key

snipe-it versions before 8.7.0 contain an authorization bypass vulnerability in location print endpoints that fails to enforce per-model authorization checks. Authenticated attackers with location view permission can access printassigned and printallassigned endpoints to retrieve related users,...

📄 Grokability Snipe-IT 8.0.4 Insecure Direct Object Reference

Grokability Snipe-IT versions 8.0.4 and below suffer from an insecure direct object reference vulnerability. Exploit Title: Grokability Snipe-IT 8.0.4 - Insecure Direct Object Reference IDOR Google Dork: N/A Date: 2025-05-02 Exploit Author: Sn1p3r-H4ck3r Siripong Jintung Vendor Homepage:...