EUVD-2022-6616

Malicious code in bioql PyPI...

EUVD-2022-1065

Malicious code in bioql PyPI...

EUVD-2022-1334

Malicious code in bioql PyPI...

Exploit for Cross-site Scripting in Snipeitapp Snipe-It

PoC for CVE-2025-59712 and CVE-2025-59713 This PoC provides a...

CVE-2025-59712

Snipe-IT before 8.1.18 allows XSS...

CVE-2025-59713

Snipe-IT before 8.1.18 allows unsafe deserialization...

Cross-site Scripting (XSS)

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Cross-site Scripting XSS via improper input validation in the process responsible for handling user-supplied data. An attacker can execute arbitrary scripts in the context o...

GHSA-PHWJ-FGCH-XVRJ Snipe-IT allows unsafe deserialization

Snipe-IT before 8.1.18 allows unsafe deserialization...

Deserialization of Untrusted Data

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the deserialization process. An attacker can execute arbitrary code or manipulate application data by providing crafted serialized...

GHSA-C9WP-PR7F-HFQM Snipe-IT allows XSS

Snipe-IT before 8.1.18 allows XSS...

Snipe-IT allows XSS

Snipe-IT before 8.1.18 allows XSS...

Snipe-IT allows unsafe deserialization

Snipe-IT before 8.1.18 allows unsafe deserialization...

CVE-2025-59713

Snipe-IT before 8.1.18 allows unsafe deserialization...

CVE-2025-59712

Snipe-IT before 8.1.18 allows XSS...

CVE-2025-59713

Snipe-IT before 8.1.18 allows unsafe deserialization...

CVE-2025-59712

Snipe-IT before 8.1.18 allows XSS...

CVE-2025-59713

Snipe-IT before 8.1.18 allows unsafe deserialization...

PT-2025-38502

Name of the Vulnerable Software and Affected Versions Snipe-IT versions prior to 8.1.18 Description Snipe-IT is susceptible to a cross-site scripting XSS issue. Recommendations Update Snipe-IT to version 8.1.18 or later...

CVE-2025-59713

CVE-2025-59713 affects Snipe-IT before 8.1.18 and is caused by unsafe deserialization. Public references (Red Hat, OSV, CVE listings) and a PoC/exploit repository indicate potential exploitation paths and cross-reference CVE-2025-59712 as well. The vulnerability impacts confidentiality and integr...

Snipe-IT 代码问题漏洞

Snipe-IT is an open source IT asset/license management system from Grokability Open Source. A code issue vulnerability exists in Snipe-IT versions prior to 8.1.18 that stems from insecure deserialization...