GHSA-7G3V-4GGR-XVJF Croc may expose secret to local users

An issue was discovered in Croc before 9.6.16. The shared secret, located on a command line, can be read by local users who list all processes and their arguments...

CVE-2023-43621

An issue was discovered in Croc through 9.6.5. The shared secret, located on a command line, can be read by local users who list all processes and their arguments...

[SECURITY] Fedora 39 Update: golang-gopkg-alecthomas-kingpin-2-2.3.2-1.fc39

Kingpin is a fluent-style, type-safe command-line parser. It supports flags, nested commands, and positional arguments...

CVE-2023-39041

An information leak in KUKURUDELI Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

PT-2023-26752 · Unknown · Ajino-Shiretoko Line

Name of the Vulnerable Software and Affected Versions: ajino-Shiretoko Line version 13.6.1 Description: An information leak allows attackers to obtain the channel access token and send crafted messages. Recommendations: For version 13.6.1, consider restricting access to the channel until a patch ...

Croc Security Breach

croc is a tool from the individual developers at Zack that allows any two computers to simply and securely transfer files and folders. A security vulnerability exists in Croc version 9.6.5 and prior versions, which stems from a shared secret located on the command line that can be read by a local...

CVE-2023-39041

CVE-2023-39041 concerns the Line/KUKURUDELI platform. Multiple connected sources describe an information leak in KUKURUDELI Line v13.6.1 that enables attackers to obtain the channel access token and to send crafted messages. The core description across sources is consistent: an information disclo...

CVE-2023-43621

An issue was discovered in Croc through 9.6.5. The shared secret, located on a command line, can be read by local users who list all processes and their arguments...

CVE-2023-43621

An issue was discovered in Croc through 9.6.5. The shared secret, located on a command line, can be read by local users who list all processes and their arguments...

IBM Storage Scale Security Vulnerability

IBM Storage Scale is a storage solution from International Business Machines IBM designed to help organizations efficiently manage and scale storage resources to meet growing data storage needs. A security vulnerability exists in IBM Storage Protect versions 8.1.0.0 through 8.1.19.0, which stems...

CVE-2023-39044

CVE-2023-39044 concerns ajino-Shiretoko Line v13.6.1, where an information leak could let an attacker obtain the channel access token and send crafted messages. The root cause isn't explicitly stated in the provided documents. No exploit code/status is shown; mitigation guidance in PT-Security PT...

CVE-2023-43621

CVE-2023-43621 affects Croc up to version 9.6.5. Affected condition: the shared secret is exposed on the command line and can be read by local users who list processes and their arguments. Reported across multiple sources (GHSA, OSV, NVD). Impact: local disclosure of the secret; no remote/externa...

PT-2023-27415 · Ibm · Ibm Storage Protect

Name of the Vulnerable Software and Affected Versions: IBM Storage Protect versions 8.1.0.0 through 8.1.19.0 Description: The issue allows a privileged user to obtain sensitive information from the administrative command line client. Recommendations: For versions 8.1.0.0 through 8.1.19.0, conside...

Line Security Breach

Line is the instant messaging platform of Line Inc. A security vulnerability exists in Line ajino-Shiretoko. No information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements...

CVE-2023-39044

An information leak in ajino-Shiretoko Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

Line Security Breach

Line is the instant messaging platform of Line Inc. A security vulnerability exists in Line KUKURUDELI. No information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements...

Line Earthgarden_waiting Security Vulnerability

Line is the instant messaging platform of Line Inc. A security vulnerability exists in Line Earthgardenwaiting. No information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements...

Line Security Breach

Line is the instant messaging platform of Line Inc. A security vulnerability exists in Line kokoroemembers card. No information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements...

CVE-2023-39044

An information leak in ajino-Shiretoko Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

PT-2023-26749 · Unknown · Kukurudeli Line

Name of the Vulnerable Software and Affected Versions: KUKURUDELI Line version 13.6.1 Description: An information leak in KUKURUDELI Line allows attackers to obtain the channel access token and send crafted messages. Recommendations: For version 13.6.1, at the moment, there is no information abou...