Zum Hauptinhalt springen
•
Proof of Concept (PoC)[webapps] pizzafy-1.0 - SQLi(21.10.2026 um 02:00 Uhr)
•••
Proof of Concept (PoC)[remote] Synametrics Syncrify 6.2 - command execution(21.10.2026 um 02:00 Uhr)
•
Proof of Concept (PoC)[webapps] Keycloak 26.7.2 - Unauthenticated Account Takeover(21.10.2026 um 02:00 Uhr)
•
Sicherheitslücken (CVE)[webapps] Open eClass 3.15 - RCE(21.10.2026 um 02:00 Uhr)
••
Proof of Concept (PoC)[webapps] Automotive Shop Management System 1.0 - SQLi(21.10.2026 um 02:00 Uhr)
•
Proof of Concept (PoC)[remote] Exasol Database 7.1.30 - command execution(21.10.2026 um 02:00 Uhr)
••
Proof of Concept (PoC)[webapps] pizzafy-1.0 - SQLi(21.10.2026 um 02:00 Uhr)
•••
Proof of Concept (PoC)[remote] Synametrics Syncrify 6.2 - command execution(21.10.2026 um 02:00 Uhr)
•
Proof of Concept (PoC)[webapps] Keycloak 26.7.2 - Unauthenticated Account Takeover(21.10.2026 um 02:00 Uhr)
•
Sicherheitslücken (CVE)[webapps] Open eClass 3.15 - RCE(21.10.2026 um 02:00 Uhr)
••
Proof of Concept (PoC)[webapps] Automotive Shop Management System 1.0 - SQLi(21.10.2026 um 02:00 Uhr)
•
Proof of Concept (PoC)[remote] Exasol Database 7.1.30 - command execution(21.10.2026 um 02:00 Uhr)
•
Intelligence View
⚡ tsecurity.de Intelligence

GitHub Release: grokability/snipe-it v8.5.0 (12.05.2026)

Release v8.5.0 von grokability/snipe-it auf GitHub: Caution This version of Snipe-IT REQUIRES PHP 8.2.0 or greater, 8.4+ recommended. PHP 8.2 is still in…

Beitrag
0
Seite
0
↗ Quelle (GitHub · grokability/snipe-it)
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
grokability/snipe-itv8.5.012.05.2026@snipe

Caution

This version of Snipe-IT REQUIRES PHP 8.2.0 or greater, 8.4+ recommended. PHP 8.2 is still in security release support until 31 Dec 2026, but let's not play that game



We're SO stoked to release v8.5 of Snipe-IT for so many reasons!


Tons of bug fixes, and also - we now support PHP 8.5! We're also now on Laravel 12, which won't matter to most folks, but means we can start to move forward on some really cool stuff that the framework limitation kept us from doing.


As always, the nitty gritty is in the What's Changed below - but very importantly, this release addresses several security issues, so we strongly encourage everyone to update as soon as is feasible.


BUT FIRST - The Snipe-IT Mobile App


Everyone wants to know about the mobile app. We're freakishly close to a beta release. So much progress has been made already, the suspense is killing us. We were hoping to time this release with more specific news about the mobile app, but this release means that when the mobile app does launch, it will be a much better experience. Watch this space - it's happening soon.


Complex Advanced Search Queries


We've heard from so many people about how the "advanced" search wasn't so... advanced.


Previously, the advanced search (the icon with the + sign in it) was... okay. We've supercharged it in this release to allow and vs or, and also some pretty cool add-ons to be able to filter in a much more nuanced way.


Screenshot 2026-05-12 at 7 57 19 PM

Advanced searches return a partial match by default. For more specific results, you can use not:value to fuzzy-exclude, is:value for an exact match, is_not:value for an exact exclusion, is:null for empty values, and is:not_null for non-empty. (In these examples, value is the text you are searching for - or seeking to exclude.)


This is all API-powered, so if you're using the API in a more complicated way, you automatically have all of this new operator and filter functionality. (We're a little behind on the docs, but we'll have that updated soon, I swear.)


Small usability issue - hitting enter (or return) on that advanced search modal will now submit the form.


Let's Talk About SCIM, Baby


SCIM now officially supports groups, location, company, and manager syncing. Because of how SCIM works, this won't happen automagically, you'll need to map those fields in your directory service provider, and we'll have updated docs for that shortly.


This is a shockingly short blurb about stuff that took a really long time, but for the folks who cared about this in the first place, it's a big deal.


Caution

If you have internal groups that are named the same as Snipe-IT permission groups, you could accidentally overwrite permission groups in Snipe-IT. Use this carefully, and definitely make a backup first.



Bulk Delete Licenses


While this shouldn't come up too often, imports do go bad and providers change sometimes. If you have a bunch of licenses that have no seats assigned, you can now delete them in bulk.







Screen.Recording.2026-05-12.at.1.10.36.PM.mov








Re-Send Asset Acceptance from the user view


You can now re-send the unaccepted item notice from a user's page (if they have outstanding items that have not been signed for or the EULAs were not yet accepted.)


Screenshot 2026-04-16 at 3 57 00 PM

Sign in Place


SO many people have asked for this, and we're so jazzed to be able to release it. If your workflow requires a user to sign in place - as in they are literally standing there - you can do that now. It will still direct you to your intended destination after the user accepts what's been assigned, but you can now do that in-place, in-person.


Screenshot 2026-04-14 at 9 23 22 PM

That checkbox will remember your previous choice, so for folks who really wanted this to streamline their workflow, this should help a lot. (Admittedly not our best work in terms of test data screenshots.)


Report Dashboard


Reports have always been a weird outlier in terms of information architecture here. We've made some big improvements in that department, so anyone with reports permission will now see this:







Screen.Recording.2026-05-11.at.2.24.58.PM.mov








Custom Asset Report


You can now use "only assigned" or "only unassigned" in the custom asset report.


AI Stuff


While it's not in this release, we are working on a built-in MCP server, so if AI is your thing, stay tuned.


What's Changed



New Contributors



Full Changelog: v8.4.1...v8.5.0

🔍 CTI & Forensik

Cyber Threat Intelligence & Forensik

ATT&CK-Navigator · IoC-Radar · Exploit-Belege
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
2 Knoten · 1 Relationen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Jetzt Bewertung abgeben
🟢 Niedrig (1-3.9) 🟡 Mittel (4.0-6.9) 🔴 Hoch (7.0-8.9) Kritisch (9.0-10.0)

Verwandte Story-Cluster & Quellen (Vektor-KI)

Zum Aktualisieren ziehen
Nächster Beitrag