PT-2023-23477 · Unknown · Marui Official App

Name of the Vulnerable Software and Affected Versions: Marui Official app version 13.6.1 Description: The issue allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp Marui Official Store function. Recommendations: For version 13.6.1, consider...

CVE-2023-31823

An issue found in Marui Co Marui Official app v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp Marui Official Store function...

CVE-2023-31818

An issue found in Marukyu Line v.13.4.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp function...

CVE-2023-31818

An issue found in Marukyu Line v.13.4.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp function...

CVE-2023-31818

An issue found in Marukyu Line v.13.4.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp function...

Information disclosure

An issue found in Marukyu Line v.13.4.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp function...

Marukyu Line 安全漏洞

Marukyu Line is a news site of Marukyu Corporation. A security vulnerability exists in Marukyu Line version 13.4.1, which stems from a vulnerability that allows a remote attacker to access sensitive information via a channel access token in the miniapp feature...

CVE-2023-31818

An issue found in Marukyu Line v.13.4.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp function...

Malicious code in paypay-ecommerce-miniapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1b7ace2d557b78c19ca9d9f0d89799a93ced84a6b8f9715dfcc460999be4178 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5248 Malicious code in paypay-ecommerce-miniapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1b7ace2d557b78c19ca9d9f0d89799a93ced84a6b8f9715dfcc460999be4178 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in miniapp-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e036790235d17ef2b3d0cc2df5f8994a1bcbb19c06da8fcdeda2f7433621ff74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4598 Malicious code in miniapp-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e036790235d17ef2b3d0cc2df5f8994a1bcbb19c06da8fcdeda2f7433621ff74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in identity-module-miniapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0542d6c493c3b6ae5639bba02c5e0ff7dde9a666fb7204e112c86bf4ddd9747 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3770 Malicious code in identity-module-miniapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0542d6c493c3b6ae5639bba02c5e0ff7dde9a666fb7204e112c86bf4ddd9747 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...