Rakuten Securities MARKETSPEED Security Load Dynamic Link Library Vulnerability

Rakuten Securities MARKETSPEED is a foreign exchange-specific trading tool from Japan's Rakuten Securities Rakuten Securities. A security vulnerability exists in the installer in Rakuten Securities MARKETSPEED version 16.4 and earlier. An attacker could exploit the vulnerability to execute...

JVN#78422300: The installer of MARKET SPEED may insecurely load Dynamic Link Libraries

The installer of MARKET SPEED provided by Rakuten Securities, Inc. contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the installer. Solution Use the latest...

account.rakuten-sec.co.jp Open Redirect vulnerability

Vulnerable URL: http://account.rakuten-sec.co.jp/cgi-bin/btracking?URL=https://www.xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 25.04.2016 Latest check for patch:| 25.04.2016 14:12 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank|...