CVE-2023-43304

An issue in PARK DANDAN mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line PARK DANDAN mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification via a compromised channel access token...

PT-2023-28772 · Line · Line +1

Name of the Vulnerable Software and Affected Versions: Line version 13.6.1 Description: An issue in the PARK DANDAN mini-app on Line allows attackers to send crafted malicious notifications via leakage of the channel access token. Recommendations: For Line version 13.6.1, consider disabling the...

PT-2023-30113 · Unknown · Kalli Dan Kd Coming Soon

Name of the Vulnerable Software and Affected Versions: Kalli Dan KD Coming Soon versions 1.7 and earlier Description: The issue is related to the deserialization of untrusted data. This can potentially lead to security risks, as deserializing untrusted data can allow an attacker to execute...

Groupnotes Inc. Videostream Mac client allows for privilege escalation to root account

Overview Groupnotes Inc. Videostream Mac client installs a LaunchDaemon that runs with root privileges. The daemon is vulnerable to a race condition that allows for arbitrary file writes. A low privileged attacker can escalate privileges to root on affected systems. Description Every five hours t...

arnhotel.com Cross Site Scripting vulnerability OBB-3565354

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

pumpsouth.com Cross Site Scripting vulnerability OBB-3565345

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

dan-ball.jp Cross Site Scripting vulnerability OBB-3453173

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MAL-2023-210 Malicious code in coyote-america-a-natural-and-supernatural-history-by-dan-flores-on-audiobook-new-version- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea10dc5f5d9a551fd232299c8b9a024a12aa3ffe0dfde7bf48530ec0851bde51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

dan-steel.com Cross Site Scripting vulnerability OBB-2982836

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress My Calendar plugin <= 3.3.16 - Unauthenticated Open Redirect vulnerability

Unauthenticated Open Redirect vulnerability discovered by Dan Kegel in WordPress My Calendar plugin versions = 3.3.16. Solution Update the WordPress My Calendar plugin to the latest available version at least 3.3.17...

A Bootiful Podcast: RabbitMQ rabbit-herder Dan Carwin

Hi, Spring fans! In this installment Josh Long @starbuxman talks to a very busy rabbit-herder on the RabbitMQ team, Dan Carwin @dcarwin...

A Bootiful Podcast: Spring Developer Advocate Dan Vega

Hi, Spring fans! In this installment, Josh Long @starbuxman talks to fellow Spring Developer Advocate Dan Vega @therealdanvega...

GHSA-CQMH-MPX2-G633 Improper Restriction of Operations within the Bounds of a Memory Buffer in python-cjson

Buffer overflow in Dan Pascu python-cjson 1.0.5, when UCS-4 encoding is enabled, allows context-dependent attackers to cause a denial of service application crash or possibly have unspecified other impact via vectors involving crafted Unicode input to the cjson.encode function...

Improper Restriction of Operations within the Bounds of a Memory Buffer in python-cjson

Buffer overflow in Dan Pascu python-cjson 1.0.5, when UCS-4 encoding is enabled, allows context-dependent attackers to cause a denial of service application crash or possibly have unspecified other impact via vectors involving crafted Unicode input to the cjson.encode function...

GitHub Revoked Insecure SSH Keys Generated by a Popular git Client

Code hosting platform GitHub has revoked weak SSH authentication keys that were generated via the GitKraken git GUI client due to a vulnerability in a third-party library that increased the likelihood of duplicated SSH keys. As an added precautionary measure, the Microsoft-owned company also said...

A week in security (April 26 – May 2)

Last week on Malwarebytes Labs, we looked at which age range is most likely to be targeted by online predators, talked to Malwarebytes CISO John Donovan on our Lock and Code podcast, and explored the latest deepfake happenings. We also dug into a supply chain attack, discussed threats from a...

[Security Nation] Marina Ciavatta and int eighty Put the Fun into Hacking With Hacking Esports and Dual Core Music

!\Security Nation\ Marina Ciavatta and int eighty Put the Fun into Hacking With Hacking Esports and Dual Core Musichttps://blog.rapid7.com/content/images/2021/04/securitynationlogo-65.jpg In this episode of Security Nation, we are joined by Marina Ciavatta and int eighty to talk about Hacking...

Artica Proxy 4.3.0 - Authentication Bypass

Exploit Title: Artica Proxy 4.3.0 - Authentication Bypass Google Dork: N/A Date: 2020-08-13 Exploit Author: Dan Duffy Vendor Homepage: http://articatech.net/ Software Link: http://articatech.net/download2x.php?IsoOnly=yes Version: 4.30.00000000 REQUIRED Tested on: Debian CVE : CVE-2020-17506 impo...

Windows Kernel - Information Disclosure Vulnerability

PoC for the SWAPGS attack CVE-2019-1125 This holds the sources for the SWAPGS attack PoC publicly shown at Black Hat USA, 2019. Contents leakgsbkva - variant 1 look for random values in kernel memory; limited to PE kernel image header leakgsbkvat - variant 2 extract random values from kernel...