1094 matches found
CVE-2025-63601
Snipe-IT before version 8.3.3 contains a remote code execution vulnerability that allows an authenticated attacker to upload a malicious backup file containing arbitrary files and execute system commands...
CVE-2025-63601
CVE-2025-63601 affects Snipe-IT prior to 8.3.3. An authenticated attacker can upload a malicious backup file (via the backup/restore flow) containing arbitrary files and then execute system commands, yielding remote code execution. The vulnerability is described as a remote code execution with a ...
EUVD-2025-37899
Snipe-IT before version 8.3.3 contains a remote code execution vulnerability that allows an authenticated attacker to upload a malicious backup file containing arbitrary files and execute system commands...
Snipe-IT 安全漏洞
Snipe-IT is an open source IT asset/license management system from Grokability Open Source. A security vulnerability exists in Snipe-IT versions prior to 8.3.3 that originates from allowing an authenticated attacker to upload a malicious backup file containing arbitrary files and execute system...
CVE-2025-63601
Snipe-IT before version 8.3.3 contains a remote code execution vulnerability that allows an authenticated attacker to upload a malicious backup file containing arbitrary files and execute system commands...
PT-2025-45120
Name of the Vulnerable Software and Affected Versions Snipe-IT versions prior to 8.3.3 Description An authenticated attacker can execute system commands by uploading a malicious backup file containing arbitrary files. The issue is a remote code execution that allows for arbitrary file uploads and...
Deserialization Of Untrusted Data
Snipe-IT is vulnerable to Deserialization Of Untrusted Data. The vulnerability is due to improper handling of untrusted serialized data, which allows an attacker to supply malicious objects that can be deserialized to execute arbitrary code or manipulate application logic...
Cross-site Scripting (XSS)
Snipe-IT is vulnerable to Cross-site Scripting XSS. The vulnerability is due to improper sanitization of user-supplied input, which allows an attacker to inject and execute arbitrary web scripts in the context of a victim’s browser...
EUVD-2021-2448
Malware in sbrugna...
EUVD-2021-2332
Malware in sbrugna...
EUVD-2021-2162
Malware in sbrugna...
EUVD-2021-2203
Malware in sbrugna...
EUVD-2021-2297
Malware in sbrugna...
EUVD-2021-2184
Malware in sbrugna...
EUVD-2021-2585
Malware in sbrugna...
EUVD-2021-2498
Malware in sbrugna...
EUVD-2021-2443
Malware in sbrugna...
EUVD-2021-2278
Malware in sbrugna...