PT-2023-13464 · Unknown · Shop Beat Media Player

Name of the Vulnerable Software and Affected Versions: Shop Beat Media Player versions 2.5.95 through 3.2.57 Description: The issue is related to Insecure Permissions. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents whe...

CVE-2022-36246

Shop Beat Solutions Pty LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Insecure Permissions...

CVE-2022-36247

Shop Beat Solutions Pty LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to IDOR via controlpanel.shopbeat.co.za...

CVE-2022-36249

Shop Beat Solutions Pty LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Bypass 2FA via APIs. For Controlpanel Lite. "After login we are directly able to use the bearer token or jsession ID to access the apis instead of entering the 2FA code. Thus, leading to bypass of 2FA on API...

CVE-2022-36244

Shop Beat Solutions Pty LTD Shop Beat Media Player 2.5.95 up to 3.2.57 suffers from Multiple Stored Cross-Site Scripting XSS vulnerabilities via Shop Beat Control Panel found at www.shopbeat.co.za controlpanel.shopbeat.co.za...

CVE-2022-36250

Shop Beat Solutions Pty LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Cross Site Request Forgery CSRF...

CVE-2022-36243

Shop Beat Solutions pty LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Directory Traversal via server.shopbeat.co.za. Information Exposure Through Directory Listing vulnerability in "studio" software of Shop Beat. This issue affects: Shop Beat studio studio versions prior to 3.2....

beat-plug.com Cross Site Scripting vulnerability OBB-2938554

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

getLastPrice() return wrong price

Lines of code Vulnerability details Impact operate and addObservation both of them use PRICE.getLastPrice but it will return wrong price. So all the updates are just random prices Proof of Concept 1- keeper invoke beat on Heart.sol 2- this operator.operate; to trigger price range update and marke...

openbeat.net Cross Site Scripting vulnerability OBB-2379912

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

euro-beat.be Cross Site Scripting vulnerability OBB-1262382

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

[SECURITY] Fedora 30 Update: aubio-0.4.9-1.fc30

aubio is a library for audio labeling. Its features include segmenting a sound file before each of its attacks, performing pitch detection, tapping the beat and producing midi streams from live audio. The name aubio comes from 'audio' with a typo: several transcription errors are likely to be fou...

The vulnerability in the scripts beatsUploader.php, photoUploader.php, and editAccount.php of the ClipBucket video content management system allows a hacker to upload malicious files to the server.

The vulnerability of the ClipBucket video content management system’s scripts beatUploader.php, photoUploader.php, and editAccount.php can be exploited. Exploiting this vulnerability allows a malicious actor to upload malicious files to the server using parameters like name for beatUploader.php a...

BEAT MP3 - Rhythm Game - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application BEAT MP3 - Rhythm Game published at the 'play' market has multiple vulnerabilities...

BEAT MP3 2.0 - Rhythm Game - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application BEAT MP3 2.0 - Rhythm Game published at the 'play' market has multiple vulnerabilities...

beat gather U - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application beat gather U published at the 'play' market has multiple vulnerabilities...

Tap Tap Hero - Jelly Beat - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Tap Tap Hero - Jelly Beat published at the 'play' market has multiple vulnerabilities...

Music Madman - Beat Moster - Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Music Madman - Beat Moster published at the 'play' market has multiple vulnerabilities...

Beat Hero - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Beat Hero published at the 'play' market has multiple vulnerabilities...

Beat Box - External URLs, SD-card access, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Beat Box published at the 'play' market has multiple vulnerabilities...