EUVD-2022-1795

Malicious code in bioql PyPI...

CVE-2024-51094

An issue in Snipe-IT v.7.0.13 build 15514 allows a low-privileged attacker to modify their profile name and inject a malicious payload into the "Name" field. When an administrator later accesses the People Management page, exports the data as a CSV file, and opens it, the injected payload will be...

Incorrect Default Permissions and Improper Access Control in snipe-it

snipe-it is vulnerable to Improper Access Control/Incorrect Default Permissions...

CVE-2021-4075

snipe-it is vulnerable to Server-Side Request Forgery SSRF...

CVE-2021-3931

snipe-it is vulnerable to Cross-Site Request Forgery CSRF...