2316 matches found
PT-2024-13159 · Line · Line
Name of the Vulnerable Software and Affected Versions: Line version 13.6.1 Description: An issue in the picot.golf mini-app allows attackers to send crafted malicious notifications via leakage of the channel access token. This can be exploited by sending malicious notifications. Recommendations:...
PT-2024-13154 · Line · Line
Name of the Vulnerable Software and Affected Versions: Line version 13.6.1 Description: An issue in the mokumoku chohu mini-app on Line allows attackers to send crafted malicious notifications via leakage of the channel access token. This leakage enables attackers to exploit the system, potential...
CVE-2023-43993
An issue in smaregiappmarket mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...
CVE-2023-43994
An issue in Cleaningmakotoya mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...
Line Security Breach
Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line Books-futaba mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification by revealing a channel access token...
CVE-2023-43988
An issue in nature fitness saijo mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...
CVE-2023-43999
COLORFUL_laundry mini-app on LINE v13.6.1 is affected by CVE-2023-43999 due to leakage of the channel access token, enabling an attacker to send crafted malicious notifications. The issue is described across multiple feeds (Red Hat, NVD/NVD-derived, and related advisories) and is classified with ...
CVE-2023-43992
An issue in STOCKMAN GROUP mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...
PT-2024-13161 · Line · Line
Name of the Vulnerable Software and Affected Versions: Line version 13.6.1 Description: An issue in the Yoruichi hobby base mini-app on Line allows attackers to send crafted malicious notifications via leakage of the channel access token. Recommendations: For Line version 13.6.1, update to a...
Line Security Breach
Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line smaregiappmarket mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification by revealing a channel access token...
CVE-2023-43995
An issue in picot.golf mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...
CVE-2023-43990
An issue in cherub-hair mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...
Line Security Breach
Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line mokumoku chohu mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification by revealing a channel access token...
Line Security Breach
Line is an instant messaging platform from Line Inc. Line version v13.6.1 suffers from a security vulnerability that stems from Ailand clinic that allows an attacker to send a crafted malicious notification by compromising a channel access token...
CVE-2023-43991
An issue in PRIMA CLINIC mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...
CVE-2023-6944
CVE-2023-6944 affects Red Hat Developer Hub (RHDH). The catalog-import function leaks GitLab access tokens on the frontend when the base64 GitLab token ends with a newline, causing the sanitized error to reveal the raw token. With access to the token and appropriate permissions, an attacker could...
CVE-2023-6944 Rhdh: catalog-import function leaks credentials to frontend
A flaw was found in the Red Hat Developer Hub RHDH. The catalog-import function leaks GitLab access tokens on the frontend when the base64 encoded GitLab token includes a newline at the end of the string. The sanitized error can display on the frontend, including the raw access token. Upon gainin...
CVE-2023-45559
An issue in Tamakihamanoki Line v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...
