512 matches found
CVE-2023-48130
The CVE-2023-48130 issue affects the Line GINZA CAFE mini-app (Line v13.6.1). Root cause: leakage of the channel access token, allowing attackers to send crafted malicious notifications. Impact is described as information disclosure leading to token leakage and potential notification manipulation...
Line Security Breach
Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line version v13.6.1, which originates in the GINZA CAFE applet that may disclose access tokens...
cafelebouillon.fr Cross Site Scripting vulnerability OBB-3842091
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
cafetadbir.ir Improper Access Control vulnerability OBB-3836861
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
MAL-2023-8644 Malicious code in custom-cafe-pdf (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33dd3e8d4d58a7d69fd542ddab857dc16f6d942320661ddb6a637eeae7d61b18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in custom-cafe-pdf (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33dd3e8d4d58a7d69fd542ddab857dc16f6d942320661ddb6a637eeae7d61b18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
200+ Malicious Android Apps Targeting Iranian Banks: Experts Warn
An Android malware campaign targeting Iranian banks has expanded its capabilities and incorporated additional evasion tactics to fly under the radar. That's according to a new report from Zimperium, which discovered more than 200 malicious apps associated with the malicious operation, with the...
WordPress Restaurant & Cafe Addon for Elementor Plugin <= 1.5.3 is vulnerable to Broken Access Control
Software Restaurant & Cafe Addon for Elementor Type Plugin Vulnerable versions = 1.5.3 Fixed in 1.5.4 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-47826 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID b97882725329 Credits...
cafe-daiser.de Improper Access Control vulnerability OBB-3774683
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
cafe-oz.com Cross Site Scripting vulnerability OBB-3774395
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
cafe-pina.de Improper Access Control vulnerability OBB-3768164
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
cafe-n8.de Improper Access Control vulnerability OBB-3768163
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-39040
An information leak in Cheese Cafe Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...
CVE-2023-39040
An information leak in Cheese Cafe Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...
CVE-2023-39040
An information leak in Cheese Cafe Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...
Information disclosure
An information leak in Cheese Cafe Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...
CVE-2023-39040
An information leak in Cheese Cafe Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...
CVE-2023-39040
CVE-2023-39040 affects Cheese Cafe Line v13.6.1, where an information leak allows attackers to obtain the channel access token and send crafted messages. Impact: information disclosure of tokens with potential message manipulation. Remediation is not confirmed; a PT Security note suggests restric...
Cheese Cafe Line Security Breach
Cheese Cafe Line is a cafe management application from Cheese. A security vulnerability exists in Cheese Cafe Line version v13.6.1, which stems from the presence of an information disclosure vulnerability. An attacker can exploit the vulnerability to obtain a channel access token and send a...
PT-2023-26748 · Unknown · Cheese Cafe Line
Name of the Vulnerable Software and Affected Versions: Cheese Cafe Line version 13.6.1 Description: An information leak in Cheese Cafe Line allows attackers to obtain the channel access token and send crafted messages. Recommendations: For version 13.6.1, consider restricting access to sensitive...