2301 matches found
CVE-2023-39057
An information leak in hirochanKAKIwaiting v13.6.1 allows attackers to obtain the channel access token and send crafted messages...
CVE-2023-39047
An information leak in shouzu sweets oz v13.6.1 allows attackers to obtain the channel access token and send crafted messages...
Line Security Breach
Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line, which stems from a vulnerability in Tokudaya.ekimaemc. An attacker could exploit the vulnerability to obtain a channel access token to send a crafted message...
PT-2023-26756 · Unknown · Tokudaya.Honten
Name of the Vulnerable Software and Affected Versions: Tokudaya.honten version 13.6.1 Description: An information leak in Tokudaya.honten allows attackers to obtain the channel access token and send crafted messages. Recommendations: For Tokudaya.honten version 13.6.1, consider restricting access...
Line Security Breach
Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line, which stems from a vulnerability in shouzu sweets oz. An attacker can exploit the vulnerability to obtain a channel access token to send a crafted message...
PT-2023-26755 · Unknown · Shouzu Sweets Oz
Name of the Vulnerable Software and Affected Versions: shouzu sweets oz version 13.6.1 Description: An information leak in the software allows attackers to obtain the channel access token and send crafted messages. Recommendations: For shouzu sweets oz version 13.6.1, at the moment, there is no...
CVE-2023-39051
An information leak in VISION MEAT WORKS Track Diner 10/10mbl v13.6.1 allows attackers to obtain the channel access token and send crafted messages...
CVE-2023-39048
An information leak in Tokudaya.honten v13.6.1 allows attackers to obtain the channel access token and send crafted messages...
CVE-2023-39057
CVE-2023-39057 affects hirochanKAKIwaiting v13.6.1 and describes an information leak that allows attackers to obtain the channel access token and send crafted messages. Connected sources reiterate the vulnerable component and impact; some entries note a fix is required but do not specify a patche...
CVE-2023-39053
CVE-2023-39053 affects Hattoriya, v13.6.1, via an information leak that can disclose the channel access token and enable sending crafted messages. Root cause details are not provided in the supplied documents. Impact is confidentiality loss (token exposure) with no stated impact on integrity/avai...
CVE-2023-39047
The CVE-2023-39047 entry pertains to shouzu sweets oz v13.6.1, where an information-leak vulnerability allows an attacker to obtain the channel access token and send crafted messages. Public records describe the affected software/version and the leakage vector but do not detail a concrete root-ca...
CVE-2023-39054
An information leak in Tokudaya.ekimaemc v13.6.1 allows attackers to obtain the channel access token and send crafted messages...
CVE-2023-39042
An information leak in Gyouza-newhushimi v13.6.1 allows attackers to obtain the channel access token and send crafted messages...
Home Assistant vulnerable to account takeover via auth_callback login
Part of the Cure53 security audit of Home Assistant. The audit team’s analyses confirmed that the redirecturi and clientid are alterable when logging in. Consequently, the code parameter utilized to fetch the accesstoken post-authentication will be sent to the URL specified in the aforementioned...
Jenkins lambdatest-automation Plugin may expose Credentials access token
Jenkins lambdatest-automation Plugin 1.20.10 and earlier logs LAMBDATEST Credentials access token at the INFO level. This can result in accidental exposure of the token through the default system log. lambdatest-automation Plugin 1.21.0 no longer logs LAMBDATEST Credentials access token...
GHSA-HPV3-F5P7-PXJ9 Jenkins lambdatest-automation Plugin may expose Credentials access token
Jenkins lambdatest-automation Plugin 1.20.10 and earlier logs LAMBDATEST Credentials access token at the INFO level. This can result in accidental exposure of the token through the default system log. lambdatest-automation Plugin 1.21.0 no longer logs LAMBDATEST Credentials access token...
CVE-2023-39736
The leakage of the client secret in Fukunagamemberscard Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...
CVE-2023-39734
The leakage of the client secret in VISION MEAT WORKS TrackDiner10/10mc Line v13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...
