PT-2023-6522

Name of the Vulnerable Software and Affected Versions WireMock versions prior to 2.35.1 WireMock versions prior to 3.0.3 Python WireMock versions prior to 2.6.1 WireMock Studio all versions Description The issue is related to the proxy mode of WireMock, which can be protected by network...

PT-2023-27179 · Unknown · Wiremock Studio

Name of the Vulnerable Software and Affected Versions: WireMock Studio affected versions not specified Description: WireMock is a tool for mocking HTTP services. When certain request URLs like "@127.0.0.1:1234" are used in WireMock Studio configuration fields, the request might be forwarded to an...

"Connection Interrupted" error message will pop up when trigger disconnect from director or studio

• "Connection Interrupted"error message will pop up when admin user trigger disconnect from director or studio • If user directly click disconnect from toolbar or × ， issue won’t happen • Issue only happen for random users , not all users have this issue...

Information Disclosure

@apollo/server and apollo-server-core are vulnerable to Information Disclosure. The vulnerability is due to a lack sensitive information masking such as Studio API keys which can end up getting logged if they are passed incorrectly with leading/trailing whitespace or if they have any invalid...

CVE-2023-36088

Server Side Request Forgery SSRF vulnerability in NebulaGraph Studio version 3.7.0, allows remote attackers to gain sensitive information...

Server side request forgery (ssrf)

Server Side Request Forgery SSRF vulnerability in NebulaGraph Studio version 3.7.0, allows remote attackers to gain sensitive information...

PT-2023-25425 · Unknown · Nebulagraph Studio

Name of the Vulnerable Software and Affected Versions: NebulaGraph Studio version 3.7.0 Description: The issue allows remote attackers to gain sensitive information due to a Server Side Request Forgery SSRF vulnerability. Recommendations: For NebulaGraph Studio version 3.7.0, at the moment, there...

CVE-2023-36088

NebulaGraph Studio 3.7.0 is affected by a Server Side Request Forgery (SSRF) vulnerability. Connected sources consistently describe SSRF leading to sensitive information disclosure. The exact root cause within the implementation, affected components, and a formal remediation/fix version are not d...

NebulaGraph Studio Code Issue Vulnerability

NebulaGraph Studio is a web-based graph database visualization tool from NebulaGraph, Inc. A security vulnerability exists in NebulaGraph Studio version 3.7.0 that originates from allowing remote attackers to obtain sensitive information...

CVE-2023-36088

Server Side Request Forgery SSRF vulnerability in NebulaGraph Studio version 3.7.0, allows remote attackers to gain sensitive information...

CVE-2023-36088

Server Side Request Forgery SSRF vulnerability in NebulaGraph Studio version 3.7.0, allows remote attackers to gain sensitive information...

CVE-2023-36088

Server Side Request Forgery SSRF vulnerability in NebulaGraph Studio version 3.7.0, allows remote attackers to gain sensitive information...

App or Desktop disappears immediately after launch and session is left in Disconnected State

App or Desktop disappears immediately after launch and session is left in Disconnected State on Studio and the VDA...

Rocky Linux 8 : .NET 6.0 (RLSA-2023:4059)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:4059 advisory. - ASP.NET and Visual Studio Security Feature Bypass Vulnerability CVE-2023-33170 Note that Nessus has not tested for this issue but has instead relied only on th...

Rocky Linux 8 : .NET 7.0 (RLSA-2023:3593)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:3593 advisory. - .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability CVE-2023-24936 - .NET, .NET Framework, and Visual Studio Denial of Servic...

Prevent logging invalid header values

Impact What kind of vulnerability is it? Apollo Server can log sensitive information Studio API keys if they are passed incorrectly with leading/trailing whitespace or if they have any characters that are invalid as part of a header value. Who is impacted? Users who all of the below: use either t...

GHSA-J5G3-5C8R-7QFX Prevent logging invalid header values

Impact What kind of vulnerability is it? Apollo Server can log sensitive information Studio API keys if they are passed incorrectly with leading/trailing whitespace or if they have any characters that are invalid as part of a header value. Who is impacted? Users who all of the below: use either t...

CVE-2023-24397

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Reservation.Studio Reservation.Studio widget plugin = 1.0.11 versions...

Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar

CVE-2023-38831 En este caso, os comparto los archivos necesar...

WordPress plugin Reservation.Studio widget 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...