914 matches found
JVN#41048401: Japan Connected-free Wi-Fi vulnerable to script injection
Japan Connected-free Wi-Fi provided by NTT Broadband Platform, Inc. is vulnerable to script injection when displaying malformed strings contained in SSID. Impact When the device running the app connects to an access point and its SSID contains malicious script, the script may be executed. Solutio...
Citing Wassenaar, HP Pulls out of Mobile Pwn2Own
More evidence of the potential chilling effect the Wassenaar Arrangement could have on security research surfaced this week when it was revealed HP has decided not to take part in November’s Mobile Pwn2Own hacking contest in Japan. Dragos Ruiu, who organizes the CanSecWest and PacSecWest...
NHN Japan LINE@Arbitrary Code Execution Vulnerability
LINE is an ultra-popular social app from NHN Japan. A security vulnerability exists in NHN Japan LINE@, which can be exploited by an attacker to inject and execute arbitrary code in the user context by performing a man-in-the-middle attack...
siltech.harman-japan.co.jp XSS vulnerability
Vulnerable URL: http://siltech.harman-japan.co.jp/search.php?q=%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...
lg.com XSS vulnerability
Vulnerable URL: http://www.lg.com/jp/search.lg Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1366 Google Pagerank| 7 VIP website status:| Yes Check lg.com SSL connection:| Grade: ...
Hacking Team Flash Zero-Day Linked to Cyber Attacks on South Korea and Japan
The corporate data leaked in the recent cyber attack on the infamous surveillance software firm Hacking Team has revealed that the Adobe Flash zero-day CVE-2015-5119 exploit has already been added to several exploit kits. Security researchers at Trend Micro have discovered evidences of the Adobe...
shop.adidas.jp XSS vulnerability
Vulnerable URL: http://shop.adidas.jp/pc/item/?q=yolo%27-alert%27xssposed%27;return%20false// Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 12:09 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...
the-japan-news.com XSS vulnerability
Open Bug Bounty ID: OBB-59554 Description| Value ---|--- Affected Website:| the-japan-news.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...
CVE-2014-7270
Cross-site request forgery CSRF vulnerability on ASUS JAPAN RT-AC87U routers with firmware 3.0.0.4.378.3754 and earlier, RT-AC68U routers with firmware 3.0.0.4.376.3715 and earlier, RT-AC56S routers with firmware 3.0.0.4.376.3715 and earlier, RT-N66U routers with firmware 3.0.0.4.376.3715 and...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability on ASUS JAPAN RT-AC87U routers with firmware 3.0.0.4.378.3754 and earlier, RT-AC68U routers with firmware 3.0.0.4.376.3715 and earlier, RT-AC56S routers with firmware 3.0.0.4.376.3715 and earlier, RT-N66U routers with firmware 3.0.0.4.376.3715 and...
CVE-2014-7270
CVE-2014-7270 is a CSRF vulnerability affecting ASUS JAPAN RT-series routers (RT-AC87U, RT-AC68U, RT-AC56S, RT-N66U, RT-N56U). The issue is triggered via malicious pages while users are authenticated, allowing attackers to hijack user sessions and perform unintended actions. Root cause involves c...
Multiple ASUS wireless LAN routers vulnerable to cross-site request forgery
Overview Multiple wireless LAN routers provided by ASUS JAPAN Inc. contain a cross-site request forgery vulnerability. Masashi Sakai reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact If a user views a maliciou...
CVE-2014-7255
Internet Initiative Japan Inc. SEIL Series routers SEIL/X1 2.50 through 4.62, SEIL/X2 2.50 through 4.62, SEIL/B1 2.50 through 4.62, and SEIL/x86 Fuji 1.70 through 3.22 allow remote attackers to cause a denial of service CPU and traffic consumption via a large number of NTP requests within a short...
CVE-2014-7509
The A Very Short History of Japan aka com.ireadercity.c51 application 3.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7509
CVE-2014-7509 affects the Android app “A Very Short History of Japan” (package com.ireadercity.c51) v3.0.2, which does not verify X.509 certificates in SSL, enabling MITM attackers to spoof servers and exfiltrate sensitive data via a crafted certificate. Root cause: missing server certificate val...
Yahoo! Japan Box for Android issue where it fails to verify SSL server certificates
Overview Yahoo! Japan Box for Android provided by Yahoo Japan Corporation contains an issue where it fails to verify SSL server certificates. Yahoo Japan Corporation reported this vulnerability to JPCERT/CC to notify users of this issue through JVN. JPCERT/CC coordinated with Yahoo Japan...
JVN#48270605: Yahoo! Japan Box for Android issue where it fails to verify SSL server certificates
Yahoo! Japan Box for Android provided by Yahoo Japan Corporation contains an issue where it fails to verify SSL server certificates. Impact A man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication. Solution Update the Software Update to the latest version...
japan-ryokan.net XSS vulnerability
Open Bug Bounty ID: OBB-49353 Description| Value ---|--- Affected Website:| japan-ryokan.net Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...
CVE-2014-5881
The Yahoo! Japan Box aka jp.co.yahoo.android.ybox application 1.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The Yahoo! Japan Box aka jp.co.yahoo.android.ybox application 1.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...