CVE-2026-107761

The Postiz platform contains a vulnerability where several endpoints return complete database rows, exposing sensitive secrets. Specifically, the public API's channel delete endpoint returns the platform access and refresh tokens, allowing third-party OAuth apps with delete permissions to access ...

CVE-2023-39047

An information leak in shouzu sweets oz v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

CVE-2023-39048

An information leak in Tokudaya.honten v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

PT-2023-26764 · Unknown · Hirochankakiwaiting

Name of the Vulnerable Software and Affected Versions: hirochanKAKIwaiting version 13.6.1 Description: An information leak in hirochanKAKIwaiting allows attackers to obtain the channel access token and send crafted messages. Recommendations: For hirochanKAKIwaiting version 13.6.1, update to a...

CVE-2023-39740

The leakage of the client secret in Onigiriya-musubee Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...

CVE-2023-39043

An information leak in YKC Tokushimaawayokocho Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...