2151 matches found
CVE-2023-43297
An issue in animal-art-lab v13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...
Code injection
An issue in animal-art-lab v13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...
CVE-2023-43297
An issue in animal-art-lab v13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...
CVE-2023-43297
CVE-2023-43297 affects animal-art-lab v13.6.1. The issue allows attackers to trigger crafted notifications via leakage of the channel access token, enabling a potential leakage/unauthorized notification flow. Public sources in the provided documents consistently describe the vulnerability as stem...
CVE-2023-43297
An issue in animal-art-lab v13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...
Animal-art-lab Security Breach
animal-art-lab is an application. A security vulnerability exists in Animal-art-lab version v13.6.1, which stems from a vulnerability that allows an attacker to send a notification by revealing the access token of a channel...
GitHub Repositories Hit by Password-Stealing Commits Disguised as Dependabot Contributions
A new deceptive campaign has been observed hijacking GitHub accounts and committing malicious code disguised as Dependabot contributions with an aim to steal passwords from developers. "The malicious code exfiltrates the GitHub project's defined secrets to a malicious C2 server and modify any...
Rockstar Games: Exposed CDN access token allows modification of all newly uploaded Snapmatic photos
A CDN access token was exposed that allowed modification of newly uploaded Snapmatic photos in GTA5. This provided a brief window to alter content after uploading. The issue was fixed by removing the exposed CDN fields...
CVE-2023-5166
Docker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URL. This issue affects Docker Desktop: before 4.23.0...
CVE-2023-5166
Docker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URL. This issue affects Docker Desktop: before 4.23.0...
Code injection
Docker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URL. This issue affects Docker Desktop: before 4.23.0...
CVE-2023-5166 Docker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URL
Docker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URL. This issue affects Docker Desktop: before 4.23.0...
CVE-2023-5166
Docker Desktop before 4.23.0 is affected by CVE-2023-5166, enabling access token theft via a crafted extension icon URL. The issue affects Docker Desktop components related to extension icon handling and is described across multiple sources (NVD/NVD-like entries, PRION, PT-/security advisories). ...
CVE-2023-5166 Docker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URL
Docker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URL. This issue affects Docker Desktop: before 4.23.0...
PT-2023-5447 · Docker · Docker Desktop
Name of the Vulnerable Software and Affected Versions: Docker Desktop versions prior to 4.23.0 Description: The issue affects Docker Desktop and is related to the disclosure of protected information. It allows a remote attacker to obtain an access token using a specially crafted extension icon UR...
CVE-2023-39045
An information leak in kokoroemembers card Line 13.6.1 allows attackers to obtain the channel access token and send crafted messages...
CVE-2023-39045
An information leak in kokoroemembers card Line 13.6.1 allows attackers to obtain the channel access token and send crafted messages...
CVE-2023-39052
An information leak in Earthgardenwaiting 13.6.1 allows attackers to obtain the channel access token and send crafted messages...