13936 matches found
CVE-2023-44001
CVE-2023-44001 affects Line’s Ailand clinic mini-app (Line v13.6.1). The root cause is leakage of the channel access token, enabling attackers to send crafted malicious notifications. Impact is limited to ability to abuse the channel access token to inject notifications; no broader exploit/vector...
CVE-2023-43991
CVE-2023-43991 concerns the PRIMA CLINIC mini-app on Line version 13.6.1. The underlying issue is leakage of the channel access token, enabling an attacker to send crafted malicious notifications. Public sources consistently describe this token leakage as the root cause and the ability to misuse ...
CVE-2023-43994
The CVE-2023-43994 issue concerns Line's Cleaning_makotoya mini-app (Line v13.6.1). The vulnerability arises from leakage of the channel access token, enabling an attacker to send crafted malicious notifications through that token. The description in external sources (connected PT-2023-1716) ties...
Arbitrary file read vulnerability through the CLI can lead to RCE
Jenkins has a built-in command line interface CLI to access Jenkins from a script or shell environment. Jenkins uses the https://github.com/kohsuke/args4jargs4j library to parse command arguments and options on the Jenkins controller when processing CLI commands. This command parser has a feature...
Line Security Breach
Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line Cleaningmakotoya mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification by revealing a channel access token...
WordPress plugin Albo Pretorio On line Information Disclosure Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. An information disclosure vulnerability...
CVE-2023-43989
An issue in mokumoku chohu mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...
PT-2024-13160 · Line · Line
Name of the Vulnerable Software and Affected Versions: Line version 13.6.1 Description: An issue in the Q co ltd mini-app on Line allows attackers to send crafted malicious notifications via leakage of the channel access token. This leakage enables attackers to exploit the system. Recommendations...
CVE-2023-43989
An issue in mokumoku chohu mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...
CVE-2023-43992
CVE-2023-43992 affects the STOCKMAN GROUP mini-app on Line version 13.6.1. The root issue is leakage of the channel access token, which can allow an attacker to send crafted malicious notifications. There is no concrete patch information in the provided documents; one PT-security entry (PT-2024-1...
PT-2024-13153 · Line · Line
Name of the Vulnerable Software and Affected Versions: Line version 13.6.1 Description: An issue in the nature fitness saijo mini-app on Line allows attackers to send crafted malicious notifications via leakage of the channel access token. Recommendations: For version 13.6.1, consider restricting...
CVE-2023-43995
CVE-2023-43995 affects the Line picot.golf mini-app (Line v13.6.1). The root issue is leakage of the channel access token , which can allow an attacker to cause the app to send crafted, malicious notifications. The available documents do not specify exploitation prevalence, affected builds beyond...
PT-2024-13162 · Line · Line
Name of the Vulnerable Software and Affected Versions: Line version 13.6.1 Description: An issue in the Books-futaba mini-app on Line allows attackers to send crafted malicious notifications via leakage of the channel access token. This leakage enables attackers to exploit the system, potentially...
CVE-2023-43997
An issue in Yoruichi hobby base mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...
CVE-2023-44001
An issue in Ailand clinic mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...
PT-2024-13163 · Line · Line
Name of the Vulnerable Software and Affected Versions: Line version 13.6.1 Description: An issue in the COLORFUL laundry mini-app allows attackers to send crafted malicious notifications via leakage of the channel access token. This leakage enables attackers to exploit the system. Recommendations...
PT-2024-13165 · Line · Ailand Clinic Mini-App
Name of the Vulnerable Software and Affected Versions: Ailand clinic mini-app on Line version 13.6.1 Description: An issue in the Ailand clinic mini-app on Line allows attackers to send crafted malicious notifications via leakage of the channel access token. This leakage enables attackers to...
Line Security Breach
Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line STOCKMAN GROUP mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification by revealing a channel access token...