1083 matches found
GHSA-PHWJ-FGCH-XVRJ Snipe-IT allows unsafe deserialization
Snipe-IT before 8.1.18 allows unsafe deserialization...
Snipe-IT allows unsafe deserialization
Snipe-IT before 8.1.18 allows unsafe deserialization...
Cross-site Scripting (XSS)
Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Cross-site Scripting XSS via improper input validation in the process responsible for handling user-supplied data. An attacker can execute arbitrary scripts in the context o...
CVE-2025-59713
Snipe-IT before 8.1.18 allows unsafe deserialization...
CVE-2025-59712
Snipe-IT before 8.1.18 allows XSS...
CVE-2025-59712
CVE-2025-59712 affects Snipe-IT prior to 8.1.18 where an XSS vulnerability exists due to improper sanitization of the User-Agent field when a user updates their profile. The issue enables injection of arbitrary JavaScript in pages that render the user reports/activity data. A PoC/exploit exists d...
CVE-2025-59712
Snipe-IT before 8.1.18 allows XSS...
CVE-2025-59713
CVE-2025-59713 affects Snipe-IT before 8.1.18 and is caused by unsafe deserialization. Public references (Red Hat, OSV, CVE listings) and a PoC/exploit repository indicate potential exploitation paths and cross-reference CVE-2025-59712 as well. The vulnerability impacts confidentiality and integr...
CVE-2025-59713
Snipe-IT before 8.1.18 allows unsafe deserialization...
PT-2025-38503
Name of the Vulnerable Software and Affected Versions Snipe-IT versions prior to 8.1.18 Description Snipe-IT is susceptible to an unsafe deserialization issue. Recommendations Update to Snipe-IT version 8.1.18 or later...
Snipe-IT 代码问题漏洞
Snipe-IT is an open source IT asset/license management system from Grokability Open Source. A code issue vulnerability exists in Snipe-IT versions prior to 8.1.18 that stems from insecure deserialization...
CVE-2025-59712
Snipe-IT before 8.1.18 allows XSS...
Snipe-IT 跨站脚本漏洞
Snipe-IT is an open source IT asset/license management system from Grokability Open Source. A cross-site scripting vulnerability exists in Snipe-IT versions prior to 8.1.18 that stems from vulnerability to cross-site scripting attacks...
CVE-2025-59713
Snipe-IT before 8.1.18 allows unsafe deserialization...
CVE-2025-59712
Snipe-IT before 8.1.18 allows XSS...
PT-2025-38502
Name of the Vulnerable Software and Affected Versions Snipe-IT versions prior to 8.1.18 Description Snipe-IT is susceptible to a cross-site scripting XSS issue. Recommendations Update Snipe-IT to version 8.1.18 or later...
CVE-2025-59713
Snipe-IT before 8.1.18 allows unsafe deserialization...
CVE-2024-51094
An issue in Snipe-IT v.7.0.13 build 15514 allows a low-privileged attacker to modify their profile name and inject a malicious payload into the "Name" field. When an administrator later accesses the People Management page, exports the data as a CSV file, and opens it, the injected payload will be...
CVE-2024-51093
Stored Cross-Site Scripting XSS vulnerability in Snipe-IT - v7.0.13 allows an attacker to upload a malicious XML file containing JavaScript code. This can lead to privilege escalation when the payload is executed, granting the attacker super admin permissions within the Snipe-IT system...