JVN#73141967: PWR-Q200 vulnerable to DNS cache poisoning attacks

PWR-Q200 provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION is a mobile WiFi router. PWR-Q200 is vulnerable to DNS cache poisoning attacks as DNS queries are done with a fixed source port CWE-330. Impact The DNS responses spoofed by a remote attacker may result in any device on the LAN...

JVN#97243511: Installer of ”Flets Easy Setup Tool" may insecurely load Dynamic Link Libraries

Installer of "Flets Easy Setup Tool" provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the...

belfasttelegraph.co.uk XSS vulnerability

Vulnerable URL: http://www.belfasttelegraph.co.uk/?token=%3C/script%3E%3Csvg/onload%3Dconfirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 25930 VIP website...

shares.telegraph.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-341136 Description| Value ---|--- Affected Website:| shares.telegraph.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Security Setup Tool Untrusted Search Path Vulnerability

Security Setup Tool is a security setup tool from NIPPON TELEGRAPH AND TELEPHONE WEST, Japan. An untrusted search path vulnerability exists in Security Setup Tool. The vulnerability can be exploited by a remote attacker to gain privileges via a malicious DLL file in a directory...

JVN#26115441: Installer of ”Remote Support Tool (Enkaku Support Tool)” may insecurely load Dynamic Link Libraries

Installer of ”Remote Support Tool Enkaku Support Tool” provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION and NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary...

Installer of "Flets Setsuzoku Tool" may insecurely load Dynamic Link Libraries

Overview Installer of "Flets Setsuzoku Tool"provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili Masami of Tachibana Lab. reported this vulnerability to IPA. JPCERT/CC...

JVN#22272314: Installer of "Flets Setsuzoku Tool" may insecurely load Dynamic Link Libraries

Installer of "Flets Setsuzoku Tool"provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the...

JVN#11601216: Installer of "Security Kinou Mihariban" may insecurely load Dynamic Link Libraries

Installer of "Security Kinou Mihariban" provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the...

JVN#14926025: Installer of ”Flets Install Tool” may insecurely load Dynamic Link Libraries

Installer of "Flets Install Tool" provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the installe...

lancashiretelegraph.co.uk XSS vulnerability

Vulnerable URL: http://www.lancashiretelegraph.co.uk/archive'-alert'OPENBUGBOUNTY'-'// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 95102 VIP website status:| No Check...

Telegraph delivers better experience with Image Manager

The Telegraph Media Group TMG is a multi-media news publisher and its titles include The Daily Telegraph, The Sunday Telegraph and The Telegraph website. Today, its site serves more than 380 million pages to over 84 million unique visitors every month across the globe, featuring on average about...

go.telegraph.co.uk Open Redirect vulnerability

Vulnerable URL: http://go.telegraph.co.uk/?id=296X467=https%3A%2F%2Fwww.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 09.07.2017 Latest check for patch:| 09.07.2017 09:31 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown...

lancashiretelegraph.co.uk XSS vulnerability

Vulnerable URL: http://www.lancashiretelegraph.co.uk/search//"--!" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 108668 VIP website status:| No Check lancashiretelegraph.co.uk SSL...

U.K. Hospitals Hit in Widespread Ransomware Attack

At least 16 hospitals in the United Kingdom are being forced to divert emergency patients today after computer systems there were infected with ransomware, a type of malicious software that encrypts a victim's documents, images, music and other files unless the victim pays for a key to unlock the...

telegraph.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-207602 Description| Value ---|--- Affected Website:| telegraph.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tvguideuk.telegraph.co.uk XSS vulnerability

Vulnerable URL: http://tvguideuk.telegraph.co.uk/grid.php?region=%22%3E%3Csvg/onload=alert/XSSPOSED/%3E=111 Details: Description| Value ---|--- Patched:| Yes, at 05.09.2017 Latest check for patch:| 05.09.2017 15:55 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

telegraph.co.uk XSS vulnerability

Vulnerable URL: http://www.telegraph.co.uk/finance/property/pictures/9126031/The-worlds-30-ugliest-buildings.html?frame=--%3E%3Csvg/onload=alert'OPENBUGBOUNTY'%3E%3C!-- Details: Description| Value ---|--- Patched:| Yes, at 13.07.2017 Latest check for patch:| 13.07.2017 16:47 GMT Vulnerability...

JVN#45034304: Multiple Hikari Denwa routers vulnerable to cross-site request forgery

Multiple Hikari Denwa routers contain a cross-site request forgery vulnerability CWE-352. Impact If a user views a malicious page while logged in, unintended operations may be performed. Solution Update the Firmware Apply the appropriate firmware update provided by the developer. Products Affecte...

JVN#77403442: Multiple Hikari Denwa routers vulnerable to OS command injection

Multiple Hikari Denwa routers contain an OS command injection vulnerability CWE-78. Impact An arbitrary OS command may be executed on the product by a logged-in attacker. Solution Update the Firmware Apply the appropriate firmware update provided by the developer. Products Affected NIPPON TELEGRA...