2299 matches found
PT-2023-26753 · Line · Kokoroe Members Card Line
Name of the Vulnerable Software and Affected Versions: kokoroe members card Line version 13.6.1 Description: An information leak in the kokoroe members card allows attackers to obtain the channel access token and send crafted messages. Recommendations: For version 13.6.1, consider restricting...
CVE-2023-39052
An information leak in Earthgardenwaiting 13.6.1 allows attackers to obtain the channel access token and send crafted messages...
CVE-2023-39041
An information leak in KUKURUDELI Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...
PT-2023-26752 · Unknown · Ajino-Shiretoko Line
Name of the Vulnerable Software and Affected Versions: ajino-Shiretoko Line version 13.6.1 Description: An information leak allows attackers to obtain the channel access token and send crafted messages. Recommendations: For version 13.6.1, consider restricting access to the channel until a patch ...
CVE-2023-39052
An information leak in Earthgardenwaiting 13.6.1 allows attackers to obtain the channel access token and send crafted messages...
CVE-2023-39044
CVE-2023-39044 concerns ajino-Shiretoko Line v13.6.1, where an information leak could let an attacker obtain the channel access token and send crafted messages. The root cause isn't explicitly stated in the provided documents. No exploit code/status is shown; mitigation guidance in PT-Security PT...
CVE-2023-39052
Summary: CVE-2023-39052 affects Earthgarden_waiting 13.6.1, describing an information disclosure that allows attackers to obtain the channel access token and send crafted messages. The NVD entry lists a MEDIUM severity (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N; base 6.5). Other connected sou...
CVE-2023-39045
CVE-2023-39045 affects the kokoroe_members card (Line version 13.6.1). Affected component exposes an information leak allowing attackers to obtain the channel access token and send crafted messages. Public docs provide no confirmed fix version; one vendor note recommends restricting access to the...
PT-2023-26749 · Unknown · Kukurudeli Line
Name of the Vulnerable Software and Affected Versions: KUKURUDELI Line version 13.6.1 Description: An information leak in KUKURUDELI Line allows attackers to obtain the channel access token and send crafted messages. Recommendations: For version 13.6.1, at the moment, there is no information abou...
CVE-2023-39041
An information leak in KUKURUDELI Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...
CVE-2023-39045
An information leak in kokoroemembers card Line 13.6.1 allows attackers to obtain the channel access token and send crafted messages...
CVE-2023-39045
An information leak in kokoroemembers card Line 13.6.1 allows attackers to obtain the channel access token and send crafted messages...
PT-2023-26760 · Unknown · Earthgarden Waiting
Name of the Vulnerable Software and Affected Versions: Earthgarden waiting version 13.6.1 Description: An information leak in Earthgarden waiting allows attackers to obtain the channel access token and send crafted messages. Recommendations: For Earthgarden waiting version 13.6.1, at the moment,...
CVE-2023-39044
An information leak in ajino-Shiretoko Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...
CVE-2023-39044
An information leak in ajino-Shiretoko Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...
No rate limiting on creating access token
Description: Access token creation is a critical security component in many applications, especially when it comes to user authentication and authorization. Without proper rate limiting controls, attackers may exploit this process to launch various types of attacks, such as brute force attacks,...
CVE-2023-39049
An information leak in youmart-tokunaga v13.6.1 allows attackers to obtain the channel access token and send crafted messages...
CVE-2023-39046
An information leak in TonTon-Teiwaiting Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...
