SeaCMS 安全漏洞

SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS version 13.3, which stems from an arbitrary file read issue in the filegetcontents function in...

PT-2025-8721

Name of the Vulnerable Software and Affected Versions SeaCMS version 13.3 Description A remote code execution issue was discovered in the admin ip.php component, allowing for potential code execution. Recommendations For SeaCMS version 13.3, update to a newer version that contains a fix for this...

CVE-2025-25799

CVE-2025-25799 concerns SeaCMS 13.3, where an arbitrary file read vulnerability exists in the file_get_contents call within admin_safe.php. The root cause is improper handling of file access in that function, enabling reading unintended files. Impact per sources: confidentiality and integrity vio...

PT-2025-8718

Name of the Vulnerable Software and Affected Versions SeaCMS version 13.3 Description A remote code execution issue was discovered in the admin smtp.php component, allowing for potential code execution. Recommendations For SeaCMS version 13.3, update to a version that includes a fix for this issu...

CVE-2025-25800

CVE-2025-25800 affects SeaCMS 13.3. An arbitrary file read vulnerability exists in the file_get_contents function within admin_safe_file.php. The published descriptions indicate this enables disclosure of sensitive information through unintended file access. Several sources (NVD, Red Hat, CVE lis...

CVE-2025-25521

Seacms =13.3 is vulnerable to SQL Injection in admintypenews.php...

CVE-2025-25516

Seacms =13.3 is vulnerable to SQL Injection in adminpaylog.php...

CVE-2025-25521

Seacms =13.3 is vulnerable to SQL Injection in admintypenews.php...

CVE-2025-25514

Seacms =13.3 is vulnerable to SQL Injection in admincollectnews.php...

SeaCMS 安全漏洞

SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS version 13.3, which stems from an SQL injection in the adminreslib.php file...

CVE-2025-25515

Seacms

SeaCMS 安全漏洞

SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS version 13.3, which stems from an SQL injection in the admincollectnews.php file...

UBUNTU-CVE-2025-0376

An XSS vulnerability exists in GitLab CE/EE affecting all versions from 13.3 prior to 17.6.5, 17.7 prior to 17.7.4 and 17.8 prior to 17.8.2 that allows an attacker to execute unauthorized actions via a change page...

PT-2024-21894 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab-EE versions 13.3 through 17.1.7 GitLab-EE versions 17.2 through 17.2.5 GitLab-EE versions 17.3 through 17.3.2 Description: An issue was discovered in GitLab-EE that would allow an attacker to modify an on-demand DAST scan without...

CVE-2023-40398

This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.4, macOS Big Sur 11.7.5, macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4. A sandboxed process may be able to circumvent sandbox restrictions...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Ventura versions prior to 13.3, which stems from a sandboxed process that may be able to bypass sandbox restrictions...

GitLab 13.3 < 13.3.9 / 13.4 < 13.4.5 / 13.5 < 13.5.2 (CVE-2020-26406)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Certain SAST CiConfiguration information could be viewed by unauthorized users in GitLab EE starting with 13.3. This information was exposed through GraphQL to non-members of public projects with...

GitLab 12.4 < 13.2.10 / 13.3 < 13.3.7 / 13.4 < 13.4.2 (CVE-2020-13340)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2: Stored XSS in CI Job Log CVE-2020-13340 Note that Nessus has not tested for this issue but has instea...

GitLab 13.3 < 13.3.4 (CVE-2020-13300)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab CE/EE version 13.3 prior to 13.3.4 was vulnerable to an OAuth authorization scope change without user consent in the middle of the authorization flow. CVE-2020-13300 Note that Nessus has not...

GitLab 7.7 < 13.1.10 / 13.2 < 13.2.8 / 13.3 < 13.3.4 (CVE-2020-13312)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab OAuth endpoint was vulnerable to brute-force attacks through a specific parameter. CVE-2020-13312 Note that...