Scrapy is vulnerable to a denial of service (DoS) attack due to flaws in brotli decompression implementation

Scrapy versions up to 2.13.3 are vulnerable to a denial of service DoS attack due to a flaw in its brotli decompression implementation. The protection mechanism against decompression bombs fails to mitigate the brotli variant, allowing remote servers to crash clients with less than 80GB of...

CVE-2026-11591 Widgets for Google Reviews <= 13.3 - Authenticated (Editor+) Stored Cross-Site Scripting via 'fomo-title' and 'fomo-text' Parameters

The Widgets for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 13.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with editor-level...

CVE-2026-27426

Unauthenticated Cross Site Scripting XSS in Automotive Car Dealership Business = 13.3.3 versions...

CVE-2025-69228

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allow a request to be crafted in such a way that an AIOHTTP server's memory fills up uncontrollably during processing. If an application includes a handler that uses the Request.post method, ...

CVE-2025-44073

SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component admincommentnews.php...

CVE-2025-44073

SeaCMS v13.3 is vulnerable to a SQL injection flaw within the admin_comment_news.php component. This vulnerability allows for the improper neutralization of special elements used in SQL commands, potentially leading to unauthorized database access or manipulation. To mitigate this risk, users are...

CVE-2025-44072

SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component adminmanager.php...

CVE-2025-29647

SeaCMS v13.3 has a SQL injection vulnerability in the component admintempvideo.php...

PT-2025-8722

Name of the Vulnerable Software and Affected Versions SeaCMS version 13.3 Description A remote code execution issue was discovered in the admin files.php component, allowing for potential code execution. Recommendations For SeaCMS version 13.3, update to a newer version that contains a fix for th...

SeaCMS 安全漏洞

SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS v13.3 that stems from a Remote Code Execution RCE issue with the isopen parameter in the...

CVE-2025-25514

Seacms =13.3 is vulnerable to SQL Injection in admincollectnews.php...

SeaCMS 安全漏洞

SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS version 13.3, which stems from an SQL injection in the admincollect.php file, allowing an...

iXsystems TrueNAS CORE 路径遍历漏洞

iXsystems TrueNAS CORE is an open source storage software from iXsystems. A path traversal vulnerability exists in iXsystems TrueNAS CORE version 13.3-RELEASE, which stems from a lack of proper validation of user-supplied paths in the tarfile.extractall method, which could lead to directory...

PT-2023-32087 · WordPress · Image Horizontal Reel Scroll Slideshow Plugin

Name of the Vulnerable Software and Affected Versions: Image horizontal reel scroll slideshow plugin for WordPress versions up to, and including, 13.3 Description: The issue is related to Stored Cross-Site Scripting via the 'ihrss-gallery' shortcode due to insufficient input sanitization and outp...

CVE-2023-6225

The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sumeta shortcode combined with post meta data in all versions up to, and including, 5.13.3 due to insufficient input sanitization and output escaping on user supplied...

Apple macOS Ventura Resource Management Error Vulnerability (CNVD-2024-17855)

Apple macOS Ventura is a desktop operating system from the American company Apple. A security vulnerability exists in Apple macOS Ventura version 13.3, which can be exploited by attackers to cause a denial of service...

Apple macOS Ventura Denial of Service Vulnerability

Apple macOS Ventura is a desktop operating system from the American company Apple. A security vulnerability exists in Apple macOS Ventura version 13.3, which can be exploited by attackers to potentially cause a denial of service...

Apple macOS Ventura 资源管理错误漏洞

Apple macOS Ventura is a desktop operating system from the American company Apple. A security vulnerability exists in Apple macOS Ventura version 13.3, which can be exploited by attackers to cause a denial of service...

Apple macOS Ventura Security Vulnerability

Apple macOS Ventura is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Ventura version 13.3, which stems from an application that could cause the system to unexpectedly terminate or write to kernel memory...

Apple macOS Ventura 安全漏洞

Apple macOS Ventura is a desktop operating system from the American company Apple. A security vulnerability exists in Apple macOS Ventura version 13.3, which can be exploited by attackers to potentially cause a denial of service...