885 matches found
the-japan-news.com XSS vulnerability
Vulnerable URL: http://the-japan-news.com/news/search?span=%5B%2714%27%5D=%5B%27%27%5D%22%27%3E%20%3C/form%3E%3Cscript%3Ealert%22OPENBUGBOUNTY%22;%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:|...
CVE-2016-4811
The NTT Broadband Platform Japan Connected-free Wi-Fi application 1.15.1 and earlier for Android and 1.13.0 and earlier for iOS allows man-in-the-middle attackers to obtain API access via unspecified vectors...
Design/Logic Flaw
The NTT Broadband Platform Japan Connected-free Wi-Fi application 1.15.1 and earlier for Android and 1.13.0 and earlier for iOS allows man-in-the-middle attackers to obtain API access via unspecified vectors...
CVE-2016-4811
The NTT Broadband Platform Japan Connected-free Wi-Fi application 1.15.1 and earlier for Android and 1.13.0 and earlier for iOS allows man-in-the-middle attackers to obtain API access via unspecified vectors...
CVE-2016-4811
CVE-2016-4811 affects NTT Broadband Platform Japan Connected-free Wi‑Fi apps: Android up to 1.15.1 and iOS up to 1.13.0. A MITM attacker can execute arbitrary API calls, gaining API access. Impact: arbitrary API execution on affected Android/iOS clients. Remediation: update to the latest version ...
benq.co.jp IFRAME Injection vulnerability
Vulnerable URL: http://www.benq.co.jp/search/module?benqcsrftokenname=e18d6e438d546f0%204%202f99223ab9293da9=%22%3E%3Ciframe%20src=%22https://www.openbugbounty.org%22%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 09:58 GMT Vulnerability...
JVN#55428526: Deep Discovery Inspector vulnerable to remote code execution
Deep Discovery Inspector provided by Trend Micro Incorporated contains a remote code execution vulnerability. Impact An attacker who can access the product as an administrator may execute arbitrary code with the root privilege. Solution For Deep Discovery Inspector 3.5 and later: Apply the patch...
NTT Broadband Platform Japan Connected-free Wi-Fi for Android and iOS Arbitrary API Execution Vulnerability
NTT Broadband Platform Japan Connected-free Wi-Fi for Android and iOS is a suite of Android and iOS-based applications from NTT Broadband Platform Japan for finding and automatically connecting to nearby free Wi-Fi in Japan. It is a set of Android and iOS based applications for NTT Broadband...
JVN#46888319: Japan Connected-free Wi-Fi vulnerable to API execution
Japan Connected-free Wi-Fi provided by NTT Broadband Platform, Inc. contains a vulnerability which allows an arbitrary API to be executed by a man-in-the-middle attacker. Impact Android version of this app may allow an arbitrary API to be executed if permissions to execute that API are granted in...
Epoch Web Mailing List Cross-Site Scripting Vulnerability
Epoch Web Mailing List is a set of web mailing lists from Epoch Japan. Epoch Web Mailing List suffers from a cross-site scripting vulnerability that can be exploited by remote attackers to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack a user's...
amazon.co.jp XSS vulnerability
Vulnerable URL:...
EnjoyLearning Japan Map Puzzle - Dynamic Code Loading, External URLs, Native code usage vulnerabilities
HackApp vulnerability scanner discovered that application EnjoyLearning Japan Map Puzzle published at the 'play' market has multiple vulnerabilities...
Drift Streets Japan - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Drift Streets Japan published at the 'play' market has multiple vulnerabilities...
Japan 100 Traditional Poems - Suspicious files, WebView files access vulnerabilities
HackApp vulnerability scanner discovered that application Japan 100 Traditional Poems published at the 'play' market has multiple vulnerabilities...
japantimes.co.jp XSS vulnerability
Vulnerable URL: http://japantimes.co.jp/images/photos2007/20070628/viewer.swf?xmlDataPath=http://45.55.162.179/vuln.xml Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 12624 Google Pagerank| 8 VIP website status:...
fxstreet.jp XSS vulnerability
Open Bug Bounty ID: OBB-130599 Description| Value ---|--- Affected Website:| fxstreet.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
japan-navi.co.jp Open Redirect vulnerability
Vulnerable URL: http://www.japan-navi.co.jp/cgi-bin/japan-navi/nph-redirect.cgi?url=http://www.xssposed.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...
ASUS Japan WL-330NUL Device Cross-Site Scripting Vulnerability
The ASUS Japan WL-330NUL is a portable wireless LAN router from ASUS. The ASUS Japan WL-330NUL suffers from a cross-site scripting vulnerability that can be exploited by remote attackers to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user...