Lucene search
+L

1083 matches found

Kitploit
Kitploit
added 2026/09/12 9:08 a.m.7 views

CVE-2022-32060

Snipe-IT 版本 v6.0.2 漏洞说明: Snipe-IT v6.0.2 的更新品牌设置组件中存在任意文件上传漏洞,攻击者可通过构造的文件执行任意代码。 攻击向量: 我们发现了一个文件上传漏洞,当在更新品牌设置页面上传恶意文件时触发。 Payload: https://github.com/bypazs/GrimTheRipper/blob/main/GrimTheRipperTeam.svg 测试环境: 1. Snipe-IT 版本 v6.0.2 2. Google Chrome 版本 102.0.5005.61 官方构建 64位 受影响组件:...

4.8CVSS5.7AI score0.01166EPSS
SaveExploits1References3
Kitploit
Kitploit
added 2026/09/11 12:35 p.m.7 views

CVE-2025-47226

CVE-2025-47226 - Snipe-IT v8.0.4以下におけるIDOR脆弱性 🚨 Snipe-ITのInsecure Direct Object Reference IDOR脆弱性により、認証されたユーザーがlocationidを改ざんすることで他部門の資産情報を閲覧できる可能性があります。 ✍️ 発見者 Siripong Jintung GitHub: Sn1p3r-H4ck3r Linkedin: www.linkedin.com/in/siripong-j-885b652b6 , Offensive Security Specialist | Movaci Co.,...

5CVSS6AI score0.01249EPSS
SaveExploits4References4
NVD
NVD
added 2026/09/10 2:17 p.m.8 views

CVE-2026-88894

Snipe-IT's predefined kit checkout path does not enforce Full Multiple Company Support FMCS tenant isolation on the checkout target. Unlike the single, bulk, API, accessory, license and consumable checkout paths, App\Services\PredefinedKitCheckoutService never calls $item-canCheckoutTo$target; it...

5.4CVSS0.00231EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/10 1:05 p.m.7 views

CVE-2026-88894

Snipe-IT , an IT asset management platform, contains an authorization bypass in its predefined kit checkout path. The root cause is that PredefinedKitCheckoutService never calls the tenant-isolation check ($item->canCheckoutTo($target)) that all other checkout paths enforce under Full Multiple...

5.4CVSS0.00231EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/10 1:05 p.m.7 views

EUVD-2026-75444

Snipe-IT's predefined kit checkout path does not enforce Full Multiple Company Support FMCS tenant isolation on the checkout target. Unlike the single, bulk, API, accessory, license and consumable checkout paths, App\Services\PredefinedKitCheckoutService never calls $item-canCheckoutTo$target; it...

5.4CVSS0.00231EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/10 1:05 p.m.31 views

CVE-2026-88894 Snipe-IT before 8.7.2 Authorization Bypass via Predefined Kit Checkout

Snipe-IT's predefined kit checkout path does not enforce Full Multiple Company Support FMCS tenant isolation on the checkout target. Unlike the single, bulk, API, accessory, license and consumable checkout paths, App\Services\PredefinedKitCheckoutService never calls $item-canCheckoutTo$target; it...

5.4CVSS0.00231EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/10 1:05 p.m.3 views

CVE-2026-88894 Snipe-IT before 8.7.2 Authorization Bypass via Predefined Kit Checkout

Snipe-IT's predefined kit checkout path does not enforce Full Multiple Company Support FMCS tenant isolation on the checkout target. Unlike the single, bulk, API, accessory, license and consumable checkout paths, App\Services\PredefinedKitCheckoutService never calls $item-canCheckoutTo$target; it...

5.3CVSS5.9AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/10 10:41 a.m.7 views

CVE-2025-64027

製品情報 Snipe-IT は Laravel で構築されたフリーかつオープンソースの IT 資産管理システム(FOSS)です。IT 運用チーム向けに、ハードウェア資産の追跡、ソフトウェアライセンス管理、アクセサリ、消耗品の在庫管理機能を提供します。積極的にメンテナンスされ、頻繁に更新されています。 概要 Snipe-IT v8.3.4(build 202118) の CSV インポートワークフローに、反射型クロスサイトスクリプティング(XSS)の脆弱性が存在します。無効な CSV ファイルがアップロードされると、アプリケーションは progressmessage...

6.1CVSS5.8AI score0.00236EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
added 2026/09/10 12:00 a.m.13 views

PT-2026-89405

Snipe-IT's predefined kit checkout path does not enforce Full Multiple Company Support FMCS tenant isolation on the checkout target. Unlike the single, bulk, API, accessory, license and consumable checkout paths, AppServicesPredefinedKitCheckoutService never calls $item-canCheckoutTo$target; it...

5.4CVSS0.00231EPSS
SaveExploits0References3
NVD
NVD
added 2026/09/09 2:17 p.m.7 views

CVE-2026-86774

Snipe-IT versions before 8.7.0 contain a broken access control vulnerability in AssetModelPolicy where the files method cascades from assets.files permission, allowing authenticated users to upload and delete file attachments on Asset Model records without the required models.files permission...

6.3CVSS0.00169EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/09 2:17 p.m.6 views

CVE-2026-86773

Snipe-IT through version 8.6.3 fails to perform object-level authorization in the updateLicense, updateConsumable, updateAccessory, and updateModel endpoints and in the storeModel endpoint for Predefined Kits. The existing check authorizes only the parent Predefined Kit update on PredefinedKit an...

5.4CVSS0.00175EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/09 2:17 p.m.6 views

CVE-2026-86771

Snipe-IT versions before 8.7.0 fail to HTML-escape the employeenum field in the acceptance PDF generator, allowing attackers with users.edit permission to inject img tags into TCPDF's writeHTML function. Attackers can craft a malicious employeenum value containing an img tag with an arbitrary HTT...

8.3CVSS0.00188EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/09 2:17 p.m.6 views

CVE-2026-86772

Snipe-IT versions before 8.7.0 contain a stored cross-site scripting vulnerability in DepartmentPresenter::formattedNameLink where department names are rendered unescaped in the fallback branch for users without departments.view permission. Users with departments.edit permission can inject...

5.4CVSS0.00138EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/09 2:17 p.m.6 views

CVE-2026-86768

Snipe-IT before 8.7.0 fails to validate soft-deleted state in API checkout endpoints, allowing authenticated users with checkout permissions to bind live inventory to trashed targets. Attackers can submit POST requests to hardware, component, or consumable checkout endpoints with soft-deleted use...

5.4CVSS0.00232EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/09 2:17 p.m.6 views

CVE-2026-86767

Snipe-IT versions before 8.7.0 fail to apply company scope filtering to the GET /hardware/requested endpoint when Full Multiple Company Support is enabled, allowing authenticated users with assets.view permission to read pending asset requests from all companies. Attackers can retrieve cross-tena...

5.3CVSS0.00183EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/09 2:17 p.m.6 views

CVE-2026-86769

Snipe-IT versions before 8.7.0 contain an improper ownership management vulnerability in the consumables checkout API endpoint that records the checkout target user's id in the createdby column instead of the authenticated caller's id. Authenticated attackers with consumables.checkout permission...

5.3CVSS0.00158EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/09 2:17 p.m.6 views

CVE-2026-86770

Snipe-IT before 8.7.0 fails to validate username case sensitivity during SAML authentication, allowing attackers to authenticate as different users by registering IdP accounts with accent or case variants of victim usernames. Attackers can exploit the default utf8mb4unicodeci database collation t...

8.6CVSS0.00283EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/09 2:17 p.m.5 views

CVE-2026-86766

Snipe-IT versions up to and including 8.6.3 contain a race condition TOCTOU in the consumable checkout API endpoint POST /api/v1/consumables/consumableid/checkout. The requested quantity is validated against the number of remaining units before the database transaction begins, and the transaction...

7.1CVSS0.00231EPSS
SaveExploits0References3
NVD
NVD
added 2026/09/09 2:17 p.m.5 views

CVE-2026-86763

Snipe-IT versions = 7.0.12 and = 8.6.3 contain an authorization bypass in the Livewire importer component App\Livewire\Importer, mounted at the imports.index route. The component only checked the broad 'import' ability at mount time, while its files and activeFile computed properties queried the...

5.1CVSS0.00161EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/09 2:17 p.m.7 views

CVE-2026-86762

Snipe-IT before 8.7.0 does not apply the CheckUserIsActivated middleware to the api middleware group in app/Http/Kernel.php, and deactivating a user does not revoke that user's Passport personal access tokens. As a result, although a deactivated account is correctly refused at web login, its...

8.6CVSS0.00311EPSS
SaveExploits0References3
Rows per page
Query Builder