Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-47226 — This CVE - PoC about information on the CVEs I found. | Kitploit
Tools/GitHubGitHub/koyomihack00/cve-2025-47226
ReconnaissanceVulnerability AnalysisExploitationWeb Application ExploitationInformation GatheringPenetration Testing
GitHubkoyomihack00/cve-2025-47226

CVE-2025-47226

This CVE - PoC about information on the CVEs I found.

View Repository
1 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2025-47226 - IDOR Vulnerability in Snipe-IT <= v8.0.4

🚨 Insecure Direct Object Reference (IDOR) vulnerability in Snipe-IT allows authenticated users to view asset information from other departments by tampering with location_id.

✍️ Discovered By

Siripong Jintung

GitHub: Sn1p3r-H4ck3r Linkedin: www.linkedin.com/in/siripong-j-885b652b6) , Offensive Security Specialist | Movaci Co., Ltd.

📋 PoC Summary

FieldDetails
CVE IDCVE-2025-47226
ProductSnipe-IT (by Grokability)
Affected Version<= v8.0.4
Patched Versionv8.1.0
TypeInsecure Direct Object Reference (IDOR)
Endpoint/locations/{id}/printassigned

🧪 Proof of Concept

See PoC/idor-exploit.md for detailed steps to reproduce.

🔐 Impact

  • Unauthorized disclosure of asset inventory and assignments between departments.
  • Breakdown of internal data boundaries in multi-departmental deployments.

🩹 Patch

  • Patch PR: https://github.com/grokability/snipe-it/pull/16672
  • Release: https://github.com/grokability/snipe-it/releases/tag/v8.1.0

📚 References

  • CVE Record
  • https://www.cve.org/CVERecord?id=CVE-2025-47226
  • https://nvd.nist.gov/vuln/detail/CVE-2025-47226
Download Tool