CVE-2023-39051

An information leak in VISION MEAT WORKS Track Diner 10/10mbl v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

CVE-2023-39054

An information leak in Tokudaya.ekimaemc v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

CVE-2023-39057

An information leak in hirochanKAKIwaiting v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

CVE-2023-39053

CVE-2023-39053 affects Hattoriya, v13.6.1, via an information leak that can disclose the channel access token and enable sending crafted messages. Root cause details are not provided in the supplied documents. Impact is confidentiality loss (token exposure) with no stated impact on integrity/avai...

PT-2023-26761 · Hattoriya · Hattoriya

Name of the Vulnerable Software and Affected Versions: Hattoriya version 13.6.1 Description: An information leak in Hattoriya allows attackers to obtain the channel access token and send crafted messages. Recommendations: For Hattoriya version 13.6.1, consider restricting access to the channel...

CVE-2023-39050

An information leak in Daiky-value.Fukueten v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

CVE-2023-39048

CVE-2023-39048 affects Tokudaya.honten v13.6.1, causing an information leak that lets attackers obtain the channel access token and send crafted messages. Connected documents confirm the affected software and describe the vulnerability as an information disclosure in Tokudaya.honten. Practical im...

CVE-2023-39048

An information leak in Tokudaya.honten v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

CVE-2023-39057

An information leak in hirochanKAKIwaiting v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

CVE-2023-39051

An information leak in VISION MEAT WORKS Track Diner 10/10mbl v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

PT-2023-26756 · Unknown · Tokudaya.Honten

Name of the Vulnerable Software and Affected Versions: Tokudaya.honten version 13.6.1 Description: An information leak in Tokudaya.honten allows attackers to obtain the channel access token and send crafted messages. Recommendations: For Tokudaya.honten version 13.6.1, consider restricting access...

CVE-2023-39048

An information leak in Tokudaya.honten v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

Line Security Breach

Line is an instant messaging platform from Line Inc. Line suffers from a security vulnerability that stems from a vulnerability in hirochanKAKIwaiting. An attacker can exploit the vulnerability to obtain a channel access token to send a crafted message...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line, which stems from a vulnerability in Hattoriya. An attacker can exploit the vulnerability to obtain a channel access token to send a crafted message...

Line Security Breach

Line is an instant messaging platform from Line Inc. Line suffers from a security vulnerability that stems from a vulnerability in Gyouza-newhushimi. An attacker can exploit the vulnerability to obtain a channel access token to send a crafted message...

PT-2023-26750 · Unknown · Gyouza-Newhushimi

Name of the Vulnerable Software and Affected Versions: Gyouza-newhushimi version 13.6.1 Description: An information leak in the software allows attackers to obtain the channel access token and send crafted messages. Recommendations: For Gyouza-newhushimi version 13.6.1, at the moment, there is no...

CVE-2023-39054

An information leak in Tokudaya.ekimaemc v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line, which stems from a vulnerability in Tokudaya.ekimaemc. An attacker could exploit the vulnerability to obtain a channel access token to send a crafted message...

PT-2023-26762 · Unknown · Tokudaya.Ekimae Mc

Name of the Vulnerable Software and Affected Versions: Tokudaya.ekimae mc version 13.6.1 Description: An information leak in the software allows attackers to obtain the channel access token and send crafted messages. Recommendations: For Tokudaya.ekimae mc version 13.6.1, at the moment, there is ...

Home Assistant vulnerable to account takeover via auth_callback login

Part of the Cure53 security audit of Home Assistant. The audit team’s analyses confirmed that the redirecturi and clientid are alterable when logging in. Consequently, the code parameter utilized to fetch the accesstoken post-authentication will be sent to the URL specified in the aforementioned...