542 matches found
taiyan.101net.tw Cross Site Scripting vulnerability OBB-1480567
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
acadsys.tmu.edu.tw Cross Site Scripting vulnerability OBB-1471474
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
toeic.ilibrary.com.tw Cross Site Scripting vulnerability OBB-1470064
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
SHUN HU Technology JUUKO Industrial Radio Remote Control
1. EXECUTIVE SUMMARY CVSS v3 8.3 ATTENTION: Exploitable from an adjacent network/low skill level to exploit Vendor: SHUN HU Technology Co., Ltd Equipment: JUUKO Industrial Radio Remote Control Vulnerabilities: Authentication Bypass by Capture-replay, Command Injection 2. RISK EVALUATION...
taiwan-cf.com Cross Site Scripting vulnerability OBB-1423884
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
bubbleteapowdertaiwan.com Cross Site Scripting vulnerability OBB-1402514
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Chinese APT Group Targets Media, Finance, and Electronics Sectors
Cybersecurity researchers on Tuesday uncovered a new espionage campaign targeting media, construction, engineering, electronics, and finance sectors in Japan, Taiwan, the U.S., and China. Linking the attacks to Palmerworm aka BlackTech — likely a China-based advanced persistent threat APT —...
Taiwan Onion website builder system suffers from SQL injection vulnerability
Onion Design mainly provides web design, website planning, graphic design and other services. Taiwan Onion website builder system has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...
taif.tfri.gov.tw Cross Site Scripting vulnerability OBB-1361116
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Advantech WebAccess Node
1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: Advantech Equipment: WebAccess Node Vulnerability: Incorrect Permission Assignment for Critical Resource 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to escalate their...
Command Execution Vulnerability in D-Link ShareCenter DNS-320 and ShareCenter DNS-325
D-Link ShareCenter DNS-320 is a Gigabit network storage device from Taiwan AUO Group.D-Link ShareCenter DNS-325 is a network storage device from Taiwan AUO Group. A command execution vulnerability exists in the D-Link ShareCenter DNS-320 and ShareCenter DNS-325. An attacker can exploit the...
Chinese Hackers Have Pillaged Taiwan's Semiconductor Industry
A campaign called Operation Skeleton Key has stolen source code, software development kits, chip designs, and more...
File Containment Vulnerability in Taiwan's Yilan B&B Travel Website
Yilan B&B travel network provides Yilan all B&B, accommodation, hotel business travel related information, collection of Yilan countryside idyllic B&B, Yilan coast B&B and so on. A file inclusion vulnerability exists in the Taiwan Yilan B&B Tourism website. An attacker can exploit the vulnerabili...
Smartwatch Maker Garmin Shuts Down Services After Ransomware Attack
Garmin, the maker of fitness trackers, smartwatches and GPS-based wearable devices, is currently dealing with a massive worldwide service interruption after getting hit by a targeted ransomware attack, an employee of the company told The Hacker News on condition of anonymity. The company's websit...
ASUS ScreenPad2 Upgrade Tool Code Issue Vulnerability
ASUS ScreenPad2 Upgrade Tool is an update tool for the ASUS ScreenPad2 touchpad from ASUS of Taiwan, China.ASUS ScreenPad2 Upgrade Tool version 1.0.3 contains the AsusScreenXpertServicec.exe and ScreenXpertUpgradeServiceManager.exe files are vulnerable to a code issue. An attacker could exploit t...
FakeSpy Android Malware Spread Via ‘Postal-Service’ Apps
Android mobile device users are being targeted in a new SMS phishing campaign that’s spreading the FakeSpy infostealer. The malware, which is disguised as legitimate global postal-service apps, steals SMS messages, financial data and more from the victims’ devices. The campaign was first discover...
Code Execution Vulnerability in CAYIN Technology CMS
CAYIN Technology CMS is a content management system CMS from CAYIN Technology in Taiwan, China. A security vulnerability exists in the 'ntpIp' parameter of the systemservice.cgi file in CAYIN Technology CMS version 11.0 and earlier. A remote attacker could exploit the vulnerability to execute cod...
Android 'ActionSpy' Malware Targets Turkic Minority Group
Researchers have discovered a new Android spyware, dubbed ActionSpy, targeting victims across Tibet, Turkey and Taiwan. The spyware is distributed either via watering-hole websites or fake websites. Researchers believe ActionSpy is being used in ongoing campaigns to target Uyghur victims. The...
chawanpich.tarad.com Cross Site Scripting vulnerability OBB-1192201
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
careerjet.com.tw Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1164594 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...