EUVD-2025-52227

Malicious code in rough-emerald-snipe npm...

EUVD-2025-52086

Malicious code in shaky-salmon-snipe npm...

EUVD-2025-55471

Malicious code in chosen-lime-snipe npm...

EUVD-2025-55146

Malicious code in correct-brown-snipe npm...

Malicious code in unfair-violet-snipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8626ee0be4c5879988a8e08e6344ec633b583f25979ca2c7961c0ab00ebf644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53079

Malicious code in near-amber-snipe npm...

Malicious code in shaky-salmon-snipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 289c3d3e1391f9b5a8ceb987759bc6e38535498a47b135b34ddaf63ba3bee2b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-50140

Malicious code in funnysnipez3n npm...

EUVD-2025-45213

Malicious code in spatialsnipez3n npm...

EUVD-2025-48019

Malicious code in drivingsnipez3n npm...

CVE-2025-63601

Snipe-IT before version 8.3.3 contains a remote code execution vulnerability that allows an authenticated attacker to upload a malicious backup file containing arbitrary files and execute system commands...

Arbitrary File Upload

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Arbitrary File Upload via the snipeit:restore command. An attacker can execute arbitrary system commands by uploading a specially crafted backup file containing malicious...

CVE-2025-63601

Snipe-IT before version 8.3.3 contains a remote code execution vulnerability that allows an authenticated attacker to upload a malicious backup file containing arbitrary files and execute system commands...

CVE-2025-63601

Snipe-IT before version 8.3.3 contains a remote code execution vulnerability that allows an authenticated attacker to upload a malicious backup file containing arbitrary files and execute system commands...

Snipe-IT 安全漏洞

Snipe-IT is an open source IT asset/license management system from Grokability Open Source. A security vulnerability exists in Snipe-IT versions prior to 8.3.3 that originates from allowing an authenticated attacker to upload a malicious backup file containing arbitrary files and execute system...

CVE-2025-63601

CVE-2025-63601 affects Snipe-IT prior to 8.3.3. An authenticated attacker can upload a malicious backup file (via the backup/restore flow) containing arbitrary files and then execute system commands, yielding remote code execution. The vulnerability is described as a remote code execution with a ...

CVE-2025-63601

Snipe-IT before version 8.3.3 contains a remote code execution vulnerability that allows an authenticated attacker to upload a malicious backup file containing arbitrary files and execute system commands...

PT-2025-45120

Name of the Vulnerable Software and Affected Versions Snipe-IT versions prior to 8.3.3 Description An authenticated attacker can execute system commands by uploading a malicious backup file containing arbitrary files. The issue is a remote code execution that allows for arbitrary file uploads and...

EUVD-2025-37899

Snipe-IT before version 8.3.3 contains a remote code execution vulnerability that allows an authenticated attacker to upload a malicious backup file containing arbitrary files and execute system commands...

CVE-2025-63601

Snipe-IT before version 8.3.3 contains a remote code execution vulnerability that allows an authenticated attacker to upload a malicious backup file containing arbitrary files and execute system commands...