CVE-2023-39740

Onigiriya-musubee Line 13.6.1 is reported to leak the client secret, enabling an attacker to obtain the channel access token and send crafted broadcast messages. Root cause: improper handling/storage of the client secret leading to exposure. Impact: potential impersonation and unauthorized broadc...

CVE-2023-39735

CVE-2023-39735 affects Uomasa_Saiji_news Line version 13.6.1. The underlying issue is leakage of the client secret, which can allow an attacker to obtain the channel access token and send crafted broadcast messages. Public details across connected documents confirm the leak and impact but do not ...

CVE-2023-39733

The CVE-2023-39733 entry concerns TonTon-Tei Line v13.6.1, where leakage of the client secret allows an attacker to obtain the channel access token and send crafted broadcast messages. The documents describe the vulnerability vector and impact (information disclosure enabling unauthorized channel...

CVE-2023-39737

CVE-2023-39737 affects Matsuya Line 13.6.1, where leakage of the client secret can enable attackers to obtain the channel access token and send crafted broadcast messages. Multiple sources in connected documents corroborate this description, including Red Hat/CISA context and NVD entries. The pre...

CVE-2023-39737: Exposure of Sensitive Information to an Unauthorized Actor

The leakage of the client secret in Matsuya Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...

CVE-2023-39737

The leakage of the client secret in Matsuya Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...

CVE-2023-39736

The CVE-2023-39736 entry concerns leakage of the client secret in Fukunaga_memberscard version 13.6.1, enabling an attacker to obtain the channel access token and send crafted broadcast messages. Public records consistently point to this leakage as the root cause, with a high-severity CVSS v3.1 s...

CVE-2023-39732

CVE-2023-39732 affects Tokueimaru Waiting Line 13.6.1. The issue is leakage of the client secret, which allows an attacker to obtain the channel access token and issue crafted broadcast messages. The available documents confirm the root cause as client secret leakage and the impact as token discl...

CVE-2023-39733

The leakage of the client secret in TonTon-Tei Line v13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...

CVE-2023-39737

The leakage of the client secret in Matsuya Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...

CVE-2023-39735

The leakage of the client secret in UomasaSaijinews Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...

PT-2023-27090 · Unknown · Tonton-Tei Line

Name of the Vulnerable Software and Affected Versions: TonTon-Tei Line version 13.6.1 Description: The leakage of the client secret allows attackers to obtain the channel access token and send crafted broadcast messages. Recommendations: For TonTon-Tei Line version 13.6.1, at the moment, there is...

CVE-2023-39734

CVE-2023-39734 affects VISION MEAT WORKS TrackDiner10/10_mc Line v13.6.1. The leakage of the client secret can allow an attacker to obtain the channel access token and send crafted broadcast messages, with CVSS 3.1 base score 8.2 (HIGH) and attack vector NETWORK, complexity LOW, user interaction ...

CVE-2023-39734: Improper Privilege Management

The leakage of the client secret in VISION MEAT WORKS TrackDiner10/10mc Line v13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...

CVE-2023-39740

The leakage of the client secret in Onigiriya-musubee Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...

PT-2023-8230

Name of the Vulnerable Software and Affected Versions RabbitMQ Java client versions prior to 5.18.0 Description The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. maxBodyLebgth was not used when receiving Message objects...

PT-2023-8905

Name of the Vulnerable Software and Affected Versions RabbitMQ versions prior to 3.11.24 RabbitMQ versions prior to 3.12.7 Description The issue is related to the HTTP API of RabbitMQ, a multi-protocol messaging and streaming broker, which did not enforce an HTTP request body limit. This made it...

CVE-2023-46287

creationtimestamp| type| source ---|---|--- 2023-10-20 18:35:14+00:00| seen| https://t.me/cibsecurity/72692 2023-10-20 18:41:16+00:00| seen| https://t.me/cibsecurity/72693...

Design/Logic Flaw

The leakage of the client secret in Kaibutsunosato v13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...

Attacks on 5G Infrastructure From User Devices: ASN.1 Vulnerabilities in 5G Cores

In the second part of this series, we will examine how attackers can trigger vulnerabilities by sending control messages masquerading as user traffic to cross over from user plane to control plane...