CVE-2023-39044

An information leak in ajino-Shiretoko Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

CVE-2023-39044

An information leak in ajino-Shiretoko Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

Information disclosure

An information leak in ajino-Shiretoko Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

CVE-2023-3341

The code that processes control channel messages sent to named calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on the environment, this may cause the packet-parsing code to run out of available stack memory,...

Exploit for Classic Buffer Overflow in Jerryscript

CVE-2023-36109 a poc for cve-2023-36109 request repo g...

CVE-2023-39052

An information leak in Earthgardenwaiting 13.6.1 allows attackers to obtain the channel access token and send crafted messages...

CVE-2023-39041

An information leak in KUKURUDELI Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

PT-2023-26752 · Unknown · Ajino-Shiretoko Line

Name of the Vulnerable Software and Affected Versions: ajino-Shiretoko Line version 13.6.1 Description: An information leak allows attackers to obtain the channel access token and send crafted messages. Recommendations: For version 13.6.1, consider restricting access to the channel until a patch ...

Ubuntu 20.04 LTS / 22.04 LTS / 23.04 : Bind vulnerabilities (USN-6390-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6390-1 advisory. It was discovered that Bind incorrectly handled certain control channel messages. A remote attacker with access to the control channe...

CVE-2023-39045

CVE-2023-39045 affects the kokoroe_members card (Line version 13.6.1). Affected component exposes an information leak allowing attackers to obtain the channel access token and send crafted messages. Public docs provide no confirmed fix version; one vendor note recommends restricting access to the...

CVE-2023-39044

CVE-2023-39044 concerns ajino-Shiretoko Line v13.6.1, where an information leak could let an attacker obtain the channel access token and send crafted messages. The root cause isn't explicitly stated in the provided documents. No exploit code/status is shown; mitigation guidance in PT-Security PT...

CVE-2023-39052

An information leak in Earthgardenwaiting 13.6.1 allows attackers to obtain the channel access token and send crafted messages...

CVE-2023-39052

Summary: CVE-2023-39052 affects Earthgarden_waiting 13.6.1, describing an information disclosure that allows attackers to obtain the channel access token and send crafted messages. The NVD entry lists a MEDIUM severity (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N; base 6.5). Other connected sou...

CVE-2023-39045

An information leak in kokoroemembers card Line 13.6.1 allows attackers to obtain the channel access token and send crafted messages...

PT-2023-26749 · Unknown · Kukurudeli Line

Name of the Vulnerable Software and Affected Versions: KUKURUDELI Line version 13.6.1 Description: An information leak in KUKURUDELI Line allows attackers to obtain the channel access token and send crafted messages. Recommendations: For version 13.6.1, at the moment, there is no information abou...

CVE-2023-39045

An information leak in kokoroemembers card Line 13.6.1 allows attackers to obtain the channel access token and send crafted messages...

CVE-2023-39044

An information leak in ajino-Shiretoko Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

CVE-2023-39044

An information leak in ajino-Shiretoko Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

CVE-2023-39041

An information leak in KUKURUDELI Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

No rate limiting on creating access token

Description: Access token creation is a critical security component in many applications, especially when it comes to user authentication and authorization. Without proper rate limiting controls, attackers may exploit this process to launch various types of attacks, such as brute force attacks,...