sym.com.tw XSS vulnerability

Vulnerable URL: http://www.sym.com.tw/news/index.php?cat=1" Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 23:26 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 392192 VIP website status:| No Check sym.com.tw...

APT Groups Exploiting Patch Microsoft Office Flaw CVE-2015-2545

A Microsoft Office vulnerability patched six months ago continues to be a valuable tool for APT gangs operating primarily in Southeast Asia and the Far East. Researchers at Kaspersky Lab today published a report describing how attackers continue to flourish exploiting CVE-2015-2545, a remote code...

Threat Outbreak Alert RuleID21947: Email Messages Distributing Malicious Software on March 27, 2016

Medium Alert ID: 44328 First Published: 2016 March 28 16:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21947 may contain the following files: Name | Si...

SQL Injection Vulnerability in SFS Academic Affairs Management System Designed by Taiwan Campus Free Software

SFS is a collaborative system built by multiple people who share open source code with each other. A SQL injection vulnerability exists in the Taiwan Campus Free Software Design SFS Academic Affairs Management System, which can be exploited by attackers to obtain sensitive information from the...

D-Link revA v1.13 路由器后门

下载了D-link无线路由器型号：DIR-100 revA的固件程序 v1.13。使用工具Binwalk，很快的就从中发现并提取出一个只读SquashFS文件系统，没用多大功夫我就将这个固件程序的web server/bin/webs加载到了IDA中： 基于上面的字符信息可以看出，这个/bin/webs二进制程序是一个修改版的thttpd，提供路由器管理员界面操作功能。看起来是经过了台湾明泰科技D-Link的一个子公司的修改。他们甚至很有心计的将他们很多自定义的函数名都辅以“alpha”前缀： 这个 alphaauthcheck 函数看起来很有意思！...

SQL Injection Vulnerability in a System of Taiwan Household Registration Office

A SQL injection vulnerability exists in a system at the Taiwan Household Registration Office, where an attacker can obtain sensitive database information by using related tools...

proverb.taiwanonline.org XSS vulnerability

Vulnerable URL: http://proverb.taiwanonline.org/display.php?author=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

suntory.com.tw XSS vulnerability

Vulnerable URL: http://www.suntory.com.tw/alcohol/kakubin/index.asp?returl=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 139165 Googl...

Threat Outbreak Alert RuleID19901: Email Messages Distributing Malicious Software on December 4, 2015

Medium Alert ID: 42503 First Published: 2015 December 4 13:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19901 may contain the following files: Name |...

Google’s $85 Chromebit Lets You Turn Any Monitor or TV into a Computer

Google and Asus are finally ready to release their new micro Chrome OS computer called the Chromebit — that retails at a great price, just $85. That is quite cheap for what is essentially a portable computer that you can take anywhere in your pocket. Also Read: CHIP — The World's First $9 Compute...

YiSpecter Apple iOS Malware Distributes Adware

Researchers warned that the November unveiling of the WireLurker malware targeting Apple platforms could turn out to be a blueprint for Mac and iOS malware writers. While WireLurker was quickly squashed and proved to be fairly benign, its authors demonstrated how the abuse of Apple-issued...

Router drive Assembly NetUSB exposure remote overflow vulnerability affects D-Link, NETGEAR, TP-LINK, etc. millions of network-vulnerability warning-the black bar safety net

Well-known router D-Link, NETGEAR, TP-LINK on the important drive components of the NetUSB was traced to the presence of serious remote overflow vulnerability, affecting millions of routing and embedded devices. NetUSB technology by Taiwanese companies profit code, KCodes develop it. myhack58...

Xiaomi Data Breach — "Exposing Xiaomi" Talk Pulled from Hacking Conference

China’s number one — and the world’s 3rd largest — smartphone manufacturer, Xiaomi, which is trying to make inroads into India’s booming mobile phone market, was found secretly sending users’ personal data, including IMEI numbers, phone numbers and text messages to the web servers back to Beijing...

Sandworm（CVE-2 0 1 4-4 1 1 4 new variants discovered for Taiwan's APT attacks-a vulnerability warning-the black bar safety net

! Xecure lab on 1 0 On 1 7, found variant of the 0day vulnerabilities worms（CVE-2 0 1 4-4 1 1 4 have been used in the for the Government of Taiwan and various units of APT attacks, the current mainstream anti-virus software also can't effectively detected. The variant can be directly embedded...

CVE-2014-7539

The Zhang Zhijun Taiwan Visit 2014-06-25 aka com.zizizzi application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7539

CVE-2014-7539 affects the Android app “com.zizizzi” v1.0 (Zhang Zhijun Taiwan Visit). The issue is lack of X.509 certificate verification for SSL servers, allowing MITM attackers to spoof servers and exfiltrate sensitive data. The root cause is improper TLS validation in the app; no remediation o...

CVE-2014-7539

The Zhang Zhijun Taiwan Visit 2014-06-25 aka com.zizizzi application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6981

The Taiwan Business Bank aka com.mitake.TBB application 2.04 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Taiwan Business Bank aka com.mitake.TBB application 2.04 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6981

CVE-2014-6981 affects the Taiwan Business Bank Android app (com.mitake.TBB) version 2.04. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive information via a crafted certificate. Connec...