CVE-2024-31611

SeaCMS 12.9 has a file deletion vulnerability via admintemplate.php...

PT-2024-24152 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS version 12.9 Description: The issue is related to a file deletion vulnerability. It can be exploited via the admin template.php file. Recommendations: For SeaCMS version 12.9, consider restricting access to the admin template.php file...

CVE-2024-31611

SeaCMS 12.9 has a file deletion vulnerability via admintemplate.php...

GitLab 12.9 < 12.10.13 / 13.0 < 13.0.8 / 13.1 < 13.1.2 (CVE-2020-13322)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - A vulnerability was discovered in GitLab versions after 12.9. Due to improper verification of permissions, an unauthorized user can create and delete deploy tokens. CVE-2020-13322 Note that Nessus has...

CVE-2024-30565

An issue was discovered in SeaCMS version 12.9, allows remote attackers to execute arbitrary code via admin notify.php...

CVE-2024-30565

An issue was discovered in SeaCMS version 12.9, allows remote attackers to execute arbitrary code via admin notify.php...

CVE-2024-30565

An issue was discovered in SeaCMS version 12.9, allows remote attackers to execute arbitrary code via admin notify.php...

PT-2024-23493 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS version 12.9 Description: An issue was discovered that allows remote attackers to execute arbitrary code via the admin notify.php endpoint. Recommendations: For SeaCMS version 12.9, consider disabling access to the admin notify.php...

CVE-2024-30565

SeaCMS 12.9 is affected by a remote code execution vulnerability exploitable via the admin notify.php endpoint. Public records confirm impact on SeaCMS and mention arbitrary code execution through this endpoint, but the provided documents do not specify a concrete exploit vector, affected version...

SeaCMS SQL Injection Vulnerability (CNVD-2024-26090)

SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A SQL injection vulnerability exists in SeaCMS version 12.9, which can be exploited by an attacker to view, add, modify, or delete information...

PT-2024-22846 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS version 12.9 Description: The issue allows remote unauthenticated attackers to execute arbitrary code and obtain sensitive information via the id parameter in class.php. This enables attackers to potentially access and manipulate...

Apple Security Update: iOS 16.7.7 and iPadOS 16.7.7Details coming soon

Apple recommends to install security update iOS 16.7.7 and iPadOS 16.7.7Details coming soon on devices iPhone 8, iPhone 8 Plus, iPhone X, iPad 5th generation, iPad Pro 9.7-inch, and iPad Pro 12.9-inch 1st generation...

BIT-GITLAB-2020-10953

In GitLab EE 11.7 through 12.9, the NPM feature is vulnerable to a path traversal issue...

About the security content of iOS 17.3 and iPadOS 17.3

About the security content of iOS 17.3 and iPadOS 17.3 This document describes the security content of iOS 17.3 and iPadOS 17.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

PT-2023-30283

Name of the Vulnerable Software and Affected Versions SeaCMS version 12.9 Description A remote code execution RCE issue was discovered in SeaCMS via the component /augap/adminip.php. This allows for potential code execution by remote attackers. Recommendations For SeaCMS version 12.9, consider...

Apple Security Update: iOS 16.7.4 and iPadOS 16.7.4

Apple recommends to install security update iOS 16.7.4 and iPadOS 16.7.4 on devices iPhone 8, iPhone 8 Plus, iPhone X, iPad 5th generation, iPad Pro 9.7-inch, and iPad Pro 12.9-inch 1st generation...

CVE-2023-46010

An issue in SeaCMS v.12.9 allows an attacker to execute arbitrary commands via the adminsafe.php component...

CVE-2023-46010

An issue in SeaCMS v.12.9 allows an attacker to execute arbitrary commands via the adminsafe.php component...

PT-2023-29794 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS version 12.9 Description: An issue in the software allows an attacker to execute arbitrary commands via the admin safe.php component. Recommendations: For SeaCMS version 12.9, consider disabling access to the admin safe.php component...

CVE-2023-1210

An issue has been discovered in GitLab affecting all versions starting from 12.9 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. It was possible to leak a user's email via an error message for groups that restrict membership by email...