EUVD-2019-5583

Malware in sbrugna...

EUVD-2019-5582

Malware in sbrugna...

EUVD-2021-17066

Malware in sbrugna...

EUVD-2019-5581

Malware in sbrugna...

CVE-2021-30126

Lightmeter ControlCenter 1.1.0 through 1.5.x before 1.5.1 allows anyone who knows the URL of a publicly available Lightmeter instance to access application settings, possibly including an SMTP password and a Slack access token, via a settings HTTP query...

CVE-2019-14365

The Intercom plugin through 1.2.1 for WordPress leaks a Slack Access Token in source code. An attacker can obtain a lot of information about the victim's Slack channels, members, etc...

CVE-2019-14366

WP SlackSync plugin through 1.8.5 for WordPress leaks a Slack Access Token in source code. An attacker can obtain a lot of information about the victim's Slack channels, members, etc...

Design/Logic Flaw

Lightmeter ControlCenter 1.1.0 through 1.5.x before 1.5.1 allows anyone who knows the URL of a publicly available Lightmeter instance to access application settings, possibly including an SMTP password and a Slack access token, via a settings HTTP query...

CVE-2019-14365

The Intercom plugin through 1.2.1 for WordPress leaks a Slack Access Token in source code. An attacker can obtain a lot of information about the victim's Slack channels, members, etc...

CVE-2019-14366

WP SlackSync plugin through 1.8.5 for WordPress leaks a Slack Access Token in source code. An attacker can obtain a lot of information about the victim's Slack channels, members, etc...

Code injection

The Intercom plugin through 1.2.1 for WordPress leaks a Slack Access Token in source code. An attacker can obtain a lot of information about the victim's Slack channels, members, etc...

CVE-2019-14365

The Intercom plugin through 1.2.1 for WordPress leaks a Slack Access Token in source code. An attacker can obtain a lot of information about the victim's Slack channels, members, etc...

CVE-2019-14366: Exposure of Sensitive Information to an Unauthorized Actor

WP SlackSync plugin through 1.8.5 for WordPress leaks a Slack Access Token in source code. An attacker can obtain a lot of information about the victim's Slack channels, members, etc...

PT-2019-13646

Name of the Vulnerable Software and Affected Versions Slack-Chat versions 1.5.5 and earlier Description The issue allows an attacker to obtain a Slack Access Token from the source code, potentially revealing significant information about the victim's Slack environment, including channels and...

WP Slacksync < 1.8.6 - Slack Access Token Disclosure

The wpslacksync leaked a Slack Access Token in source code. An attacker can obtain a lot of information about the victim's Slack channels, members, etc...

PT-2019-13645

Name of the Vulnerable Software and Affected Versions WP SlackSync plugin versions prior to 1.8.6 Description The WP SlackSync plugin for WordPress has an issue where it leaks a Slack Access Token in its source code. This leak allows an attacker to obtain significant information about the victim'...

PT-2019-13644

Name of the Vulnerable Software and Affected Versions Intercom plugin for WordPress versions through 1.2.1 Description The issue allows an attacker to obtain significant information about the victim's Slack, including channels and members, by leaking a Slack Access Token in the source code...

CVE-2019-14365: Exposure of Sensitive Information to an Unauthorized Actor

The Intercom plugin through 1.2.1 for WordPress leaks a Slack Access Token in source code. An attacker can obtain a lot of information about the victim's Slack channels, members, etc...

CVE-2019-14367: Exposure of Sensitive Information to an Unauthorized Actor

Slack-Chat through 1.5.5 leaks a Slack Access Token in source code. An attacker can obtain a lot of information about the victim's Slack channels, members, etc...