Ocean CMS suffers from SQL injection vulnerability (CNVD-2021-05518)

Ocean CMS is a video-on-demand system designed for webmasters with different needs. Ocean CMS suffers from an SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

Command execution vulnerability in Ocean CMS (CNVD-2021-05439)

Ocean CMS seacms, Ocean Video Management System is a video-on-demand system designed for webmasters with different needs. Ocean CMS has a command execution vulnerability that can be exploited by attackers to cause code execution...

Friday Squid Blogging: Searching for Giant Squid by Collecting Environmental DNA

The idea is to collect and analyze random DNA floating around the ocean, and using that to figure out where the giant squid are. No one is sure if this will actually work. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blo...

Command Execution Vulnerability in Ocean CMS-v10.9 (SeaCMS) ad***_no***.php File

Ocean CMS, also known as SeaCMS, is developed by php+mysql, completely open source and free of charge, adaptive to computer, cell phone, tablet, APP multi-terminal, no encryption, more secure. Sea CMS-v10.9 SeaCMS adno.php file has a command execution vulnerability, attackers can use this...

Command Execution Vulnerability in Ocean CMS-v10.9 (SeaCMS) ad***_we***.php File

Ocean CMS, also known as SeaCMS, is developed by php+mysql, completely open source and free of charge, adaptive to computer, cell phone, tablet, APP multi-terminal, no encryption, more secure. Sea CMS-v10.9 SeaCMS adwe.php file has a command execution vulnerability, attackers can use this...

Command Execution Vulnerability in Ocean CMS-v10.9 (SeaCMS) ad***_pi***.php File

Ocean CMS, also known as SeaCMS, is developed by php+mysql, completely open source and free of charge, adaptive to computer, cell phone, tablet, APP multi-terminal, no encryption. There is a command execution vulnerability in the file adpi.php in SeaCMS-v10.9 SeaCMS. An attacker can exploit this...

SQL Injection Vulnerability in SEACMS v10.9

Ocean Movie Management System SEACMS, Ocean CMS using php + mysql architecture, is a set of video point of view system designed for different needs of the webmasters and A SQL injection vulnerability exists in SEACMS v10.9, which can be exploited by attackers to obtain sensitive database...

Command execution vulnerability in Ocean CMS ad***_no***.php file

Ocean CMS seacms, Ocean Video Management System is a video-on-demand system designed for webmasters with different needs. A command execution vulnerability exists in the Ocean CMS adno.php file. An attacker can exploit this vulnerability to write malicious code, execute system commands, and obtai...

Ocean CMS suffers from SQL injection vulnerability (CNVD-2020-71642)

Ocean CMS is a web content management system based on PHP+MYSQL architecture that can run across platforms. Ocean CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

Command Execution Vulnerability in Ocean CMS (CNVD-2020-69473)

Ocean CMS seacms, Ocean Video Management System is a video-on-demand system designed for webmasters with different needs. A command execution vulnerability exists in Ocean CMS. An attacker can exploit this vulnerability to write malicious code, execute system commands, and obtain system privilege...

Command Execution Vulnerability in Ocean CMS (CNVD-2020-69485)

Ocean CMS seacms, Ocean Video Management System is a video-on-demand system designed for webmasters with different needs. A command execution vulnerability exists in the background of Ocean CMS. Attackers can use this vulnerability to write malicious code to execute system commands and obtain...

Command Execution Vulnerability in Ocean CMS (CNVD-2020-69482)

Ocean CMS seacms, Ocean Video Management System is a video-on-demand system designed for webmasters with different needs. A command execution vulnerability exists in the background of Ocean CMS. Attackers can use this vulnerability to write malicious code to execute system commands and obtain...

Code execution vulnerability in Ocean CMS (CNVD-2020-68572)

Ocean CMS, also known as SEACMS, is completely open source and free of charge, adaptive to computers, cell phones, tablets, APP multi-terminal, no encryption, more secure, is a station-building tool. Ocean CMS there is a code execution vulnerability, attackers can use the vulnerability submitted...

jenkins-2-plugins/blueocean: Path traversal vulnerability in Blue Ocean Plugin could allow to read arbitrary files

Jenkins Blue Ocean Plugin 1.23.2 and earlier provides an undocumented feature flag that, when enabled, allows an attacker with Job/Configure or Job/Create permission to read arbitrary files on the Jenkins controller file system...

jenkins-2-plugins/blueocean: Blue Ocean Plugin does not perform permission checks in several HTTP endpoints implementing connection tests.

A missing permission check in Jenkins Blue Ocean Plugin 1.23.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL...

RHEL 7 : OpenShift Container Platform 3.11.318 jenkins-2-plugins (RHSA-2020:5102)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:5102 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or privat...

Logic flaw vulnerability in Ocean CMS (CNVD-2020-66824)

Ocean CMS, also known as SEACMS, is completely open source and free of charge, adapting to computer, cell phone, tablet, APP multi-terminal. Ocean CMS has a logic flaw vulnerability that can be exploited by attackers to obtain sensitive information...

jenkins-2-plugins/blueocean: Blue Ocean Plugin does not perform permission checks in several HTTP endpoints implementing connection tests.

A missing permission check in Jenkins Blue Ocean Plugin 1.23.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.6.1 package security update

An update for jenkins-2-plugins, openshift-clients, podman, runc, and skopeo is now available for Red Hat OpenShift Container Platform 4.6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a...

jenkins-2-plugins/blueocean: Path traversal vulnerability in Blue Ocean Plugin could allow to read arbitrary files

Jenkins Blue Ocean Plugin 1.23.2 and earlier provides an undocumented feature flag that, when enabled, allows an attacker with Job/Configure or Job/Create permission to read arbitrary files on the Jenkins controller file system...