17960 matches found
CVE-2023-45560: Improper Control of Generation of Code
An issue in Yasukawa memberscard v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...
CVE-2023-45558: Undefined Security Weakness
An issue in Golden v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...
CVE-2023-45558
CVE-2023-45558 : An issue in Golden v13.6.1 allows an attacker to send crafted notifications by leaking the channel access token, enabling network-based impact to confidentiality. Affected: Golden 13.6.1. Root cause: leakage of the channel access token allowing unauthorized notification delivery....
CVE-2023-35041
Cross-Site Request Forgery CSRF vulnerability leading to Local File Inclusion LF in Webpushr Web Push Notifications Web Push Notifications – Webpushr plugin = 4.34.0 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability leading to Local File Inclusion LF in Webpushr Web Push Notifications Web Push Notifications – Webpushr plugin = 4.34.0 versions...
CVE-2023-35041
CVE-2023-35041 affects the WordPress plugin Webpushr Web Push Notifications (Webpushr) version
PT-2023-29574 · Golden · Golden
Name of the Vulnerable Software and Affected Versions: Golden version 13.6.1 Description: An issue in Golden allows attackers to send crafted notifications via leakage of the channel access token. Recommendations: For Golden version 13.6.1, consider restricting access to the notification system...
PT-2023-29576 · Unknown · Yasukawa Memberscard
Name of the Vulnerable Software and Affected Versions: Yasukawa memberscard version 13.6.1 Description: An issue in the software allows attackers to send crafted notifications via leakage of the channel access token. This can potentially lead to unauthorized access and manipulation of user...
PT-2023-25111
Name of the Vulnerable Software and Affected Versions Webpushr Web Push Notifications plugin versions = 4.34.0 Description The issue is related to a Cross-Site Request Forgery CSRF vulnerability that can lead to Local File Inclusion LFI. This means an attacker could potentially trick a user into...
WordPress Plugin Web Push Notifications - Webpushr Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...
CVE-2023-35041: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability leading to Local File Inclusion LF in Webpushr Web Push Notifications Web Push Notifications – Webpushr plugin = 4.34.0 versions...
CVE-2023-45816: Exposure of Sensitive Information to an Unauthorized Actor
Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the stable branch and version 3.2.0.beta3 of the beta and tests-passed branches, there is an edge case where a bookmark reminder is sent and an unread notification is generated, but the underlying bookmarkabl...
CVE-2023-47372
The leakage of channel access token in UPDATESALON C-LOUNGE Line 13.6.1 allows remote attackers to send malicious notifications to victims...
CVE-2023-47373
The leakage of channel access token in DRAGON FAMILY Line 13.6.1 allows remote attackers to send malicious notifications to victims...
CVE-2023-47373
The leakage of channel access token in DRAGON FAMILY Line 13.6.1 allows remote attackers to send malicious notifications to victims...
CVE-2023-47372
The leakage of channel access token in UPDATESALON C-LOUNGE Line 13.6.1 allows remote attackers to send malicious notifications to victims...
CVE-2023-47373
The leakage of channel access token in DRAGON FAMILY Line 13.6.1 allows remote attackers to send malicious notifications to victims...
CVE-2023-47372
The leakage of channel access token in UPDATESALON C-LOUNGE Line 13.6.1 allows remote attackers to send malicious notifications to victims...