CVE-2026-9493 BankPro E-Service Technology｜Service Center - Insecure Direct Object Reference

Service Center developed by BankPro E-Service Technology has an Insecure Direct Object Reference vulnerability, allowing authenticated remote attackers to modify the parameter of a specific query function to access other users' EC order details...

eservice.aten.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1020104 Security Researcher WhiteDevil Helped patch 67 vulnerabilities Received 3 Coordinated Disclosure badges Received 3 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting eservice.aten.com website...

eservice.aten.com XSS vulnerability

Open Bug Bounty ID: OBB-711099 Description| Value ---|--- Affected Website:| eservice.aten.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidde...

am.eservice.asus.com XSS vulnerability

Vulnerable URL: https://am.eservice.asus.com/pf/Login1.jsp?penCaptcha=Verification%20code%20fails%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

ATEN eService APP - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application ATEN eService APP published at the 'play' market has multiple vulnerabilities...