Fuji Electric FRENIC Devices (Update A)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION : Exploitable remotely/low skill level to exploit/public exploits are available Vendor : Fuji Electric Equipment : FRENIC Loader, FRENIC-Mini C1, FRENIC-Mini C2, FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace Vulnerabilities : Buffer Over-read,...

Hackers steal $60 million from Japan’s Zaif cryptocurrency exchange

By Waqas Zaif is the 35th largest cryptocurrency exchange by turnover. Hackers have stolen a whopping $60 million 6.7 billion yen worth of cryptocurrency from Zaif, the 35th largest cryptocurrency exchange dealing in Bitcoin, Bitcoin Cash, and Monacoin. The exchange is owned by Tech Bureau, Corp...

Rise of Credential Stuffing in Asia Pacific and Japan.

The rise of credential stuffing attacks globally is made possible by the tendency of customers' re-using the same credentials across different websites and attackers' easy access to stolen credential lists. Credential stuffing attacks is the result of attackers using stolen credentials username a...

japan-icd.org XSS vulnerability

Open Bug Bounty ID: OBB-672924 Description| Value ---|--- Affected Website:| japan-icd.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

japan.cgntv.net XSS vulnerability

Open Bug Bounty ID: OBB-672885 Description| Value ---|--- Affected Website:| japan.cgntv.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

japan-tv-guide.com XSS vulnerability

Open Bug Bounty ID: OBB-668381 Description| Value ---|--- Affected Website:| japan-tv-guide.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

info-innovation.jp XSS vulnerability

Open Bug Bounty ID: OBB-662558 Description| Value ---|--- Affected Website:| info-innovation.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

goldquest.jp XSS vulnerability

Open Bug Bounty ID: OBB-661216 Description| Value ---|--- Affected Website:| goldquest.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Kronos Banking Trojan Surfaces After Years of Silence

The Kronos banking trojan is back from the malware dustbin. After years of lying dormant, hackers have reworked the underlying code and are actively targeting victims in Germany, Japan and Poland. The latest variant has incorporated a new command-and-control feature designed to work with the Tor...

JVN#71329812: WL-330NUL vulnerable to cross-site request forgery

WL-330NUL provided by ASUS Japan Inc. is a portable wireless LAN router. WL-330NUL contains a cross-site request forgery vulnerability CWE-352. Impact If a user views a malicious page while logged in the management screen, unintended operations may be performed on the device. Solution Update the...

japan-ferien.ch XSS vulnerability

Open Bug Bounty ID: OBB-646867 Description| Value ---|--- Affected Website:| japan-ferien.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

japan-guide.com XSS vulnerability

Open Bug Bounty ID: OBB-645898 Description| Value ---|--- Affected Website:| japan-guide.com Open Bug Bounty Program:| View Open Bug Bounty Program Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until disclosure...

IIJ SmartKey App for Android Information Disclosure Vulnerability

IIJ SmartKey App for Android is an Android-based application from Internet Initiative Japan IIJ that provides two-factor authentication for websites. A security vulnerability exists in IIJ SmartKey App for Android. A remote attacker can exploit the vulnerability to bypass authentication...

jobs.disneycareers.jp XSS vulnerability

Open Bug Bounty ID: OBB-633650 Description| Value ---|--- Affected Website:| jobs.disneycareers.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Japanese police to charge scammers with crypto mining without consent

By Waqas The investigators believe that the case involving crypto mining is This is a post from HackRead.com Read the original post: Japanese police to charge scammers with crypto mining without consent...

Yokogawa STARDOM Controllers (Update A)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Yokogawa Equipment: STARDOM Controllers --------- Begin Update A Part 1 of 5 -------- Vulnerabilities: Use of Hard-coded Credentials, Session Fixation, Insufficiently Protected Credentials,...

japan.widex.com XSS vulnerability

Open Bug Bounty ID: OBB-623646 Description| Value ---|--- Affected Website:| japan.widex.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Japan's Directorate for Signals Intelligence

The Intercept has a long article on Japan's equivalent of the NSA: the Directorate for Signals Intelligence. Interesting, but nothing really surprising. The directorate has a history that dates back to the 1950s; its role is to eavesdrop on communications. But its operations remain so highly...

Memory Corruption Vulnerability in Nikon ViewNX-i in Japan

Nikon is a famous camera manufacturer in Japan.ViewNX-i is an image processing software from Nikon. A memory corruption vulnerability exists in Nikon ViewNX-i when processing TIFF images. An attacker can cause the program to crash by constructing a malformed TIFF image, which if successfully...

RT-AC1200HP vulnerable to cross-site scripting

Overview RT-AC1200HP provided by ASUS Japan Inc. is a wireless LAN router. RT-AC1200HP contains a cross-site scripting vulnerability CWE-79. Satoshi Ogawa of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Securi...