13185 matches found
PT-2023-27091 · Unknown · Vision Meat Works Trackdiner10/10 Mc Line
Name of the Vulnerable Software and Affected Versions: VISION MEAT WORKS TrackDiner10/10 mc Line version 13.6.1 Description: The leakage of the client secret allows attackers to obtain the channel access token and send crafted broadcast messages. Recommendations: For version 13.6.1, consider...
CVE-2023-39737
The leakage of the client secret in Matsuya Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...
PT-2023-27095 · Unknown · Regina Sweets&Bakery Line
Name of the Vulnerable Software and Affected Versions: REGINA SWEETS&BAKERY Line version 13.6.1 Description: The issue allows attackers to obtain the channel access token and send crafted broadcast messages due to the leakage of the client secret. Recommendations: For REGINA SWEETS&BAKERY Line...
CVE-2023-39732
CVE-2023-39732 affects Tokueimaru Waiting Line 13.6.1. The issue is leakage of the client secret, which allows an attacker to obtain the channel access token and issue crafted broadcast messages. The available documents confirm the root cause as client secret leakage and the impact as token discl...
PT-2023-27090 · Unknown · Tonton-Tei Line
Name of the Vulnerable Software and Affected Versions: TonTon-Tei Line version 13.6.1 Description: The leakage of the client secret allows attackers to obtain the channel access token and send crafted broadcast messages. Recommendations: For TonTon-Tei Line version 13.6.1, at the moment, there is...
CVE-2023-39740
The leakage of the client secret in Onigiriya-musubee Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...
CVE-2023-39736
The CVE-2023-39736 entry concerns leakage of the client secret in Fukunaga_memberscard version 13.6.1, enabling an attacker to obtain the channel access token and send crafted broadcast messages. Public records consistently point to this leakage as the root cause, with a high-severity CVSS v3.1 s...
GHSA-CQVV-R3G3-26RF free5GC udm vulnerable to Invalid Curve Attack
pkg/suci/suci.go in free5GC udm before 1.2.0, when Go before 1.19 is used, allows an Invalid Curve Attack because it may compute a shared secret via an uncompressed public key that has not been validated. An attacker can send arbitrary SUCIs to the UDM, which tries to decrypt them via both its...
CVE-2023-46324
pkg/suci/suci.go in free5GC udm before 1.2.0, when Go before 1.19 is used, allows an Invalid Curve Attack because it may compute a shared secret via an uncompressed public key that has not been validated. An attacker can send arbitrary SUCIs to the UDM, which tries to decrypt them via both its...
CVE-2023-46315
The zanllp sd-webui-infinite-image-browsing aka Infinite Image Browsing extension before 977815a for stable-diffusion-webui aka Stable Diffusion web UI, if Gradio authentication is enabled without secret key configuration, allows remote attackers to read any local file via /file?path= in the URL,...
CVE-2023-46315
The zanllp sd-webui-infinite-image-browsing aka Infinite Image Browsing extension before 977815a for stable-diffusion-webui aka Stable Diffusion web UI, if Gradio authentication is enabled without secret key configuration, allows remote attackers to read any local file via /file?path= in the URL,...
CVE-2023-46315
The zanllp sd-webui-infinite-image-browsing aka Infinite Image Browsing extension before 977815a for stable-diffusion-webui aka Stable Diffusion web UI, if Gradio authentication is enabled without secret key configuration, allows remote attackers to read any local file via /file?path= in the URL,...
Authentication flaw
The zanllp sd-webui-infinite-image-browsing aka Infinite Image Browsing extension before 977815a for stable-diffusion-webui aka Stable Diffusion web UI, if Gradio authentication is enabled without secret key configuration, allows remote attackers to read any local file via /file?path= in the URL,...
CVE-2023-46315
The zanllp sd-webui-infinite-image-browsing aka Infinite Image Browsing extension before 977815a for stable-diffusion-webui aka Stable Diffusion web UI, if Gradio authentication is enabled without secret key configuration, allows remote attackers to read any local file via /file?path= in the URL,...
PT-2023-29960 · Free5Gc · Free5Gc
Name of the Vulnerable Software and Affected Versions: free5GC udm versions prior to 1.2.0 Description: The issue allows an Invalid Curve Attack because it may compute a shared secret via an uncompressed public key that has not been validated. An attacker can send arbitrary SUCIs to the UDM, whic...
PT-2023-29956 · Unknown · Sd-Webui-Infinite-Image-Browsing
Name of the Vulnerable Software and Affected Versions: sd-webui-infinite-image-browsing extension versions before 977815a Description: The issue allows remote attackers to read any local file via the "/file?path=" endpoint in the URL, as demonstrated by reading /proc/self/environ to discover...
CVE-2023-39731
The leakage of the client secret in Kaibutsunosato v13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...
CVE-2023-39731
The leakage of the client secret in Kaibutsunosato v13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...