CVE-2026-89281

The Apache Lounge Windows distribution of Apache HTTP Server build contains a hardcoded configuration path vulnerability within openssl.cnf path that can allow local code execution...

EUVD-2026-84681

The Apache Lounge Windows distribution of Apache HTTP Server build contains a hardcoded configuration path vulnerability within openssl.cnf path that can allow local code execution...

CVE-2026-89281

The Apache Lounge Windows distribution of Apache HTTP Server build is affected by a hardcoded configuration path vulnerability specifically within the openssl.cnf path. This security flaw can lead to local code execution . No specific remediation, exploit links, or versions are provided in the do...

CVE-2026-89281 CVE-2026-89281

The Apache Lounge Windows distribution of Apache HTTP Server build contains a hardcoded configuration path vulnerability within openssl.cnf path that can allow local code execution...

CVE-2026-89282: Incorrect Permission Assignment for Critical Resource

The Apache Lounge Windows distribution of Apache HTTP Server build contains an insecure installation directory permissions vulnerability through its default install directory on C:, which inherits write access for Authenticated Users...

CVE-2026-89281: Incorrect Permission Assignment for Critical Resource

The Apache Lounge Windows distribution of Apache HTTP Server build contains a hardcoded configuration path vulnerability within openssl.cnf path that can allow local code execution...

PT-2026-97014

Name of the Vulnerable Software and Affected Versions Apache HTTP Server affected versions not specified Description The Apache Lounge Windows distribution of Apache HTTP Server contains a hardcoded configuration path within the openssl.cnf path. This flaw can allow a local attacker to achieve co...

PT-2026-97015

Name of the Vulnerable Software and Affected Versions Apache Lounge Windows distribution of Apache HTTP Server affected versions not specified Description This issue involves insecure installation directory permissions within the default install directory on C:. The directory inherits write acces...

Malicious code in lounge-theme-amoled (npm)

The package lounge-theme-amoled was found to contain malicious code...

MAL-2025-25612 Malicious code in lounge-theme-amoled (npm)

The package lounge-theme-amoled was found to contain malicious code...

CVE-2021-43171

Improper verification of applications' cryptographic signatures in the /e/OS app store client App Lounge before 0.19q allows attackers in control of the application server to install malicious applications on user's systems by altering the server's API response...

frankfurtfashionlounge.de Cross Site Scripting vulnerability OBB-3916622

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

lounge-about.com Improper Access Control vulnerability OBB-3804049

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

hair-lounge-with.com Improper Access Control vulnerability OBB-3800861

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-47372

The leakage of channel access token in UPDATESALON C-LOUNGE Line 13.6.1 allows remote attackers to send malicious notifications to victims...

CVE-2023-47372

The leakage of channel access token in UPDATESALON C-LOUNGE Line 13.6.1 allows remote attackers to send malicious notifications to victims...

Code injection

The leakage of channel access token in UPDATESALON C-LOUNGE Line 13.6.1 allows remote attackers to send malicious notifications to victims...

CVE-2023-47372: Inadequate Encryption Strength

The leakage of channel access token in UPDATESALON C-LOUNGE Line 13.6.1 allows remote attackers to send malicious notifications to victims...

CVE-2023-47372

CVE-2023-47372 involves leakage of a channel access token in UPDATESALON C-LOUNGE for Line version 13.6.1, enabling remote attackers to send malicious notifications to victims. Connected sources corroborate token leakage and unrelated security notes, but do not provide a concrete exploit path, af...

PT-2023-30434

Name of the Vulnerable Software and Affected Versions UPDATESALON C-LOUNGE Line version 13.6.1 Description The issue allows remote attackers to send malicious notifications to victims due to the leakage of channel access token. Recommendations For version 13.6.1, consider restricting access to th...