17961 matches found
CVE-2023-47372
CVE-2023-47372 involves leakage of a channel access token in UPDATESALON C-LOUNGE for Line version 13.6.1, enabling remote attackers to send malicious notifications to victims. Connected sources corroborate token leakage and unrelated security notes, but do not provide a concrete exploit path, af...
CVE-2023-47369
CVE-2023-47369 involves leakage of a channel access token in the best_training_member component (Line 13.6.1), enabling remote attackers to trigger or send malicious notifications. Multiple sources (NVD, Red Hat, PRION, CNNVD, CVE records) consistently describe token leakage as the underlying iss...
PT-2023-30429
Name of the Vulnerable Software and Affected Versions Platinum Clinic Line version 13.6.1 Description The issue allows remote attackers to send malicious notifications to victims due to the leakage of the channel access token. Recommendations For Platinum Clinic Line version 13.6.1, update to a...
CVE-2023-47363: Inadequate Encryption Strength
The leakage of channel access token in F.B.P members Line 13.6.1 allows remote attackers to send malicious notifications to victims...
Line Security Breach
Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line version 13.6.1, which stems from an access token disclosure issue with F.B.P members. A remote attacker could exploit the vulnerability to send a malicious notification to the victim...
Line Security Breach
Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line version 13.6.1, which stems from an access token disclosure issue in UPDATESALON C-LOUNGE. A remote attacker can exploit the vulnerability to send a malicious notification to the victim...
CVE-2023-47367
The leakage of channel access token in platinum clinic Line 13.6.1 allows remote attackers to send malicious notifications to victims...
CVE-2023-47372: Inadequate Encryption Strength
The leakage of channel access token in UPDATESALON C-LOUNGE Line 13.6.1 allows remote attackers to send malicious notifications to victims...
CVE-2023-47368
The leakage of channel access token in taketorinoyu Line 13.6.1 allows remote attackers to send malicious notifications to victims...
CVE-2023-47364
The leakage of channel access token in nagaoka taxi Line 13.6.1 allows remote attackers to send malicious notifications to victims...
CVE-2023-47365
The leakage of channel access token in Lil.OFF-PRICE STORE Line 13.6.1 allows remote attackers to send malicious notifications to victims...
CVE-2023-47364
CVE-2023-47364 affects nagaoka taxi Line, version 13.6.1. The issue is described as leakage of the channel access token, enabling remote attackers to send malicious notifications to victims. The provided sources confirm the same description across NVD, Red Hat, CNNVD, and other catalogs, but do n...
CVE-2023-47363
CVE-2023-47363 affects Line app, specifically F.B.P members version 13.6.1. The issue is leakage of the channel access token, enabling remote attackers to send malicious notifications to victims. The Red Hat/CNNVD entries corroborate token leakage and mention Line 13.6.1. No exploitation details ...
CVE-2023-47368
The CVE-2023-47368 entry concerns Line (Line messaging app) version 13.6.1, where leakage of the channel access token in taketorinoyu can enable a remote attacker to send malicious notifications to victims. The connected documents corroborate that the vulnerability involves an access-token disclo...
CVE-2023-47366: Inadequate Encryption Strength
The leakage of channel access token in craftmembers Line 13.6.1 allows remote attackers to send malicious notifications to victims...
CVE-2023-47366
The leakage of channel access token in craftmembers Line 13.6.1 allows remote attackers to send malicious notifications to victims...
CVE-2023-47364: Inadequate Encryption Strength
The leakage of channel access token in nagaoka taxi Line 13.6.1 allows remote attackers to send malicious notifications to victims...
Fedora 37 : firefox (2023-45b3c1d9ed)
The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-45b3c1d9ed advisory. - Updated to latest upstream 113.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...
Aws-Waf-Header-Analyzer - The Purpose Of The Project Is To Create Rate Limit In AWS WaF Based On HTTP Headers
The purpose of the project is to create rate limit in AWS WaF based on HTTP headers. Golang is a dependencie to build the binary. See the documentation to install: https://go.dev/doc/install make sudo make install The rules configuration is very simple, for example, the threshold is the limited o...
ASB-A-278558814
In sanitizeSbn of NotificationManagerService.java, there is a possible way to launch an activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...