CVE-2022-36243 Directory Traversal on Shop Beat Services

Shop Beat Solutions pty LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Directory Traversal via server.shopbeat.co.za. Information Exposure Through Directory Listing vulnerability in "studio" software of Shop Beat. This issue affects: Shop Beat studio studio versions prior to 3.2....

Wave Studio Animated Keyboard Emoji 安全漏洞

Wave Studio Animated Keyboard Emoji is an animated keyboard emoji application from Wave Studio, Inc. A security vulnerability exists in Wave Studio Animated Keyboard Emoji version v.1.70.7, which originates from a code execution via a database file can elevate privileges...

Can't Logoff Ghost Sessions “-” from Citrix Studio

Can't logoff the session in Studio, which is not even shown in VDAtask manager. Customer tried to hide the session with the below Powershell command, but this ghost session record still exists on Studio. "Get-BrokerSession -username Domain\username | Set-BrokerSession -hidden $true" Need to figur...

CVE-2022-36243

Shop Beat Solutions pty LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Directory Traversal via server.shopbeat.co.za. Information Exposure Through Directory Listing vulnerability in "studio" software of Shop Beat. This issue affects: Shop Beat studio studio versions prior to 3.2....

CVE-2023-28394

Beekeeper Studio versions prior to 3.9.9 allows a remote authenticated attacker to execute arbitrary JavaScript code with the privilege of the application on the PC where the affected product is installed. As a result, an arbitrary OS command may be executed as well...

CVE-2023-28394

Beekeeper Studio versions prior to 3.9.9 allows a remote authenticated attacker to execute arbitrary JavaScript code with the privilege of the application on the PC where the affected product is installed. As a result, an arbitrary OS command may be executed as well...

CVE-2023-28394

Beekeeper Studio versions prior to 3.9.9 allows a remote authenticated attacker to execute arbitrary JavaScript code with the privilege of the application on the PC where the affected product is installed. As a result, an arbitrary OS command may be executed as well...

CVE-2023-28394

Beekeeper Studio versions prior to 3.9.9 allows a remote authenticated attacker to execute arbitrary JavaScript code with the privilege of the application on the PC where the affected product is installed. As a result, an arbitrary OS command may be executed as well...

CVE-2023-28394

Beekeeper Studio is affected in versions prior to 3.9.9 by a code-injection vulnerability that allows a remote authenticated attacker to execute arbitrary JavaScript code with the app’s privileges, potentially enabling arbitrary OS commands on the host. Root cause: untrusted JavaScript execution ...

CVE-2023-28394

Beekeeper Studio versions prior to 3.9.9 allows a remote authenticated attacker to execute arbitrary JavaScript code with the privilege of the application on the PC where the affected product is installed. As a result, an arbitrary OS command may be executed as well...

PT-2023-21691 · Unknown · Beekeeper Studio

Name of the Vulnerable Software and Affected Versions: Beekeeper Studio versions prior to 3.9.9 Description: The issue allows a remote authenticated attacker to execute arbitrary JavaScript code with the privilege of the application on the PC where the affected product is installed, potentially...

Omron NJ/NX-series Machine Automation Controllers Use of Hard-Coded Credentials (CVE-2022-34151)

Use of hard-coded credentials vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software 'Sysmac...

Omron NJ/NX-series Machine Automation Controllers Authentication Bypass By Capture-Replay (CVE-2022-33208)

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software...

CVE-2023-25698

Cross-Site Request Forgery CSRF vulnerability in Studio Wombat Shoppable Images plugin = 1.2.3 versions...

CVE-2023-25698

Cross-Site Request Forgery CSRF vulnerability in Studio Wombat Shoppable Images plugin = 1.2.3 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Studio Wombat Shoppable Images plugin = 1.2.3 versions...

CVE-2023-25698 WordPress Shoppable Images Lite Plugin <= 1.2.3 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Studio Wombat Shoppable Images plugin = 1.2.3 versions...

CVE-2023-25698

CVE-2023-25698: CSRF in WordPress Shoppable Images Lite plugin = 1.2.4.

FreeBSD : vscode -- Visual Studio Code Information Disclosure Vulnerability (7913fe6d-2c6e-40ba-a7d7-35696f3db2b6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 7913fe6d-2c6e-40ba-a7d7-35696f3db2b6 advisory. - Visual Studio Code Information Disclosure Vulnerability CVE-2023-29338 Note that Nessus has not teste...

The vulnerability of Visual Studio Code’s source editor, related to insufficient protection of service data, allows a hacker to execute arbitrary code.

The vulnerability of Visual Studio Code’s source editor is related to insufficient protection for service data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...