co-wars.de Cross Site Scripting vulnerability OBB-3584926

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Remote Code Execution Vulnerability in WPS Office of Zhuhai Kingsoft Office Software Co.

WPS Office is an office software suite from Zhuhai Kingsoft Office Software Co. A remote code execution vulnerability exists in WPS Office of Zhuhai Kingsoft Office Software Co. Ltd, which can be exploited by attackers to gain server privileges...

SQL Injection Vulnerability in Intelligent Park Comprehensive Management Platform of Zhejiang Dahua Technology Co.(CNVD-2023-67975)

Zhejiang Dahua Technology Co., Ltd. is the world's leading video-centered intelligent IOT solution provider and operation service provider. A SQL injection vulnerability exists in the Smart Park Integrated Management Platform of Zhejiang Dahua Technology Co. Ltd, which can be exploited by attacke...

PT-2025-1449 · Ashlar Vellum · Ashlar-Vellum Cobalt

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt versions prior to v12 SP2 Build 1204.200 Description: The affected application lacks proper validation of user-supplied data when parsing CO files, which could lead to a heap-based buffer overflow. An attacker could...

Unauthorized Access Vulnerability in Sword Enterprise Development Platform of Shanghai Breeder Technology Co.

Shanghai Bred Technology Co., Ltd. is an enterprise mainly engaged in software and information technology service industry. An unauthorized access vulnerability exists in the Sword enterprise development platform of Shanghai Bred Technology Co. which can be exploited by attackers to obtain...

Arbitrary File Read Vulnerability in Sky Mirror Vulnerability Scanning and Management System of Kaixingchen Information Technology Group Co.

Sky Mirror Vulnerability Scanning and Management System is a vulnerability scanning product independently developed by Qixing, a network-based vulnerability analysis, assessment and management system. Sky Mirror Vulnerability Scanning and Management System of Qixing Information Technology Group...

kobe.hotelokura.co.jp Cross Site Scripting vulnerability OBB-3553124

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-31823

An issue found in Marui Co Marui Official app v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp Marui Official Store function...

CVE-2023-31821

An issue found in ALBIS Co. ALBIS v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp ALBIS function...

CVE-2023-31824

An issue found in DERICIA Co. Ltd, DELICIA v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp DELICIA function...

Information disclosure

An issue found in DERICIA Co. Ltd, DELICIA v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp DELICIA function...

Information disclosure

An issue found in ALBIS Co. ALBIS v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp ALBIS function...

CVE-2023-31823

CVE-2023-31823 affects Marui Official app v13.6.1. The issue allows a remote attacker to access sensitive information via the channel access token used by the miniapp Store function (Marui Official Store). Impact is information disclosure; no exploitation details are provided beyond this descript...

CVE-2023-31824

CVE-2023-31824 affects DELICIA v13.6.1 from DERICIA Co. Ltd. A remote attacker could access sensitive information via the channel access token in the miniapp DELICIA function. Reported across multiple feeds (Red Hat, NVD, CVE listings) with CVSSv3.1 base score 7.5 (Network, Low attack complexity,...

CVE-2023-31824

An issue found in DERICIA Co. Ltd, DELICIA v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp DELICIA function...

CVE-2023-31819

CVE-2023-31819 affects KEISEI STORE Co, Ltd. LIVRE KEISEI v13.6.1, where the miniapp function exposes the channel access token, enabling a remote attacker to access sensitive information. Root cause: improper protection/exposure of the access token in the miniapp flow. Impact: potential informati...

CVE-2023-31821

An issue found in ALBIS Co. ALBIS v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp ALBIS function...

CVE-2023-31819

An issue found in KEISEI STORE Co, Ltd. LIVRE KEISEI v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp function...

CVE-2023-31823

An issue found in Marui Co Marui Official app v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp Marui Official Store function...

CVE-2023-31819

An issue found in KEISEI STORE Co, Ltd. LIVRE KEISEI v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp function...