CVE-2023-43305

An issue in studio kent mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

CVE-2023-48127

An issue in myGAKUYA mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

CVE-2020-12432

The WOPI API integration for Vereign Collabora CODE through 4.2.2 does not properly restrict delivery of JavaScript to a victim's browser, and lacks proper MIME type access control, which could lead to XSS that steals account credentials via cookies or local storage. The attacker must first obtai...

PT-2024-13253 · Unknown · A-World Oirase Beer Waiting Line

Name of the Vulnerable Software and Affected Versions: A-WORLD OIRASE BEER waiting Line version 13.6.1 Description: An issue in the software allows attackers to send crafted notifications via leakage of the channel access token. This can potentially lead to unauthorized access and manipulation of...