Design/Logic Flaw

The Bluetooth module has a vulnerability in permission control for broadcast notifications.Successful exploitation of this vulnerability may affect confidentiality...

CVE-2023-44101

The Bluetooth module has a vulnerability in permission control for broadcast notifications.Successful exploitation of this vulnerability may affect confidentiality...

CVE-2023-44101

The CVE-2023-44101 issue affects Huawei HarmonyOS Bluetooth module, due to improper permission control for broadcast notifications. This vulnerability could lead to confidentiality disclosure if exploited. Documents consistently cite the Bluetooth component and permission-control weakness as the ...

Slackware: Security Advisory (SSA:2023-283-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-28042 · WordPress · Hide Admin Notices – Admin Notification Center

Name of the Vulnerable Software and Affected Versions: Rémi Leclercq Hide admin notices – Admin Notification Center plugin versions prior to 2.3.3 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user in...

CVE-2023-43297

An issue in animal-art-lab v13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...

CVE-2023-43297

An issue in animal-art-lab v13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...

CVE-2023-43297

An issue in animal-art-lab v13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...

Code injection

An issue in animal-art-lab v13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...

CVE-2023-41731

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in I Thirteen Web Solution WordPress publish post email notification plugin = 1.0.2.2 versions...

CVE-2023-43297

An issue in animal-art-lab v13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...

PT-2023-28764

Name of the Vulnerable Software and Affected Versions animal-art-lab version 13.6.1 Description The issue allows attackers to send crafted notifications via leakage of the channel access token. This can potentially lead to unauthorized access and manipulation of notifications. Recommendations For...

Animal-art-lab Security Breach

animal-art-lab is an application. A security vulnerability exists in Animal-art-lab version v13.6.1, which stems from a vulnerability that allows an attacker to send a notification by revealing the access token of a channel...

CVE-2023-43297: Improper Enforcement of Message Integrity During Transmission in a Communication Channel

An issue in animal-art-lab v13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...

CVE-2023-43297

CVE-2023-43297 affects animal-art-lab v13.6.1. The issue allows attackers to trigger crafted notifications via leakage of the channel access token, enabling a potential leakage/unauthorized notification flow. Public sources in the provided documents consistently describe the vulnerability as stem...

CVE-2023-43297

An issue in animal-art-lab v13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...

PT-2023-6244 · Huawei · Harmonyos

Name of the Vulnerable Software and Affected Versions: HarmonyOS affected versions not specified Description: The issue is related to a vulnerability in the Bluetooth module of the HarmonyOS operating system, which is associated with information disclosure in an error data area. It may also invol...

DRUPAL-CONTRIB-2023-047

This module enables notifications to be sent to all users of a particular role, or to the content's author when a piece of content is transitioned from one state to another via core's content\moderation module. The module doesn't sufficiently check access to content when sending notifications. Th...

CVE-2023-44123

The vulnerability is the use of implicit PendingIntents with the PendingIntent.FLAGMUTABLE set that leads to theft and/or over-write of arbitrary files with system privilege in the Bluetooth "com.lge.bluetoothsetting" app. The attacker's app, if it had access to app notifications, could intercept...

Xenomorph hunts cryptocurrency logins on Android

Cryptocurrency owners should take heed of warnings related to Xenomorph malware--Bleeping Computer reports that the most recent version of Xenomorph now targets various cryptocurrency wallets using fake browser update messaging as bait. Xenomorph is roughly a year old, first springing to prominen...