Pwn2Own Trifecta: Galaxy S9, iPhone X and Xiaomi Mi6 Fall to Hackers

Three major mobile phone models – the Samsung Galaxy S9, iPhone X and the Xiaomi Mi6 – failed to survive the hacker onslaught at this year’s Pwn2Own Tokyo 2018. In all, 18 exploits, with some attacks chaining together as many as five exploits, were used to own the three phones and earn hacker tea...

Researchers wishing to publish Microsoft Edge browser 0-day sandbox escape vulnerability-vulnerability warning-the black bar safety net

In recent days, according to Twitter nickname is@Yux1xi（Yushi Liang security researchers revealed that he plans to publish on a Microsoft browser Microsoft Edge 0-day vulnerability that can be achieved for Edge browser remote code execution RCE, and@Yux1xi also claimed that he and his Russian...

tokyo-hot-fan.com XSS vulnerability

Open Bug Bounty ID: OBB-694542 Description| Value ---|--- Affected Website:| tokyo-hot-fan.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidde...

ioc.u-tokyo.ac.jp XSS vulnerability

Open Bug Bounty ID: OBB-667752 Description| Value ---|--- Affected Website:| ioc.u-tokyo.ac.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

iam.u-tokyo.ac.jp XSS vulnerability

Open Bug Bounty ID: OBB-664911 Description| Value ---|--- Affected Website:| iam.u-tokyo.ac.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ssjda.iss.u-tokyo.ac.jp XSS vulnerability

Open Bug Bounty ID: OBB-663969 Description| Value ---|--- Affected Website:| ssjda.iss.u-tokyo.ac.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tokyo-sva.com XSS vulnerability

Open Bug Bounty ID: OBB-640157 Description| Value ---|--- Affected Website:| tokyo-sva.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tic-tokyo.co.jp XSS vulnerability

Open Bug Bounty ID: OBB-613280 Description| Value ---|--- Affected Website:| tic-tokyo.co.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

vision-tokyo.com XSS vulnerability

Open Bug Bounty ID: OBB-607715 Description| Value ---|--- Affected Website:| vision-tokyo.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tokyo-flaneur.com XSS vulnerability

Open Bug Bounty ID: OBB-596124 Description| Value ---|--- Affected Website:| tokyo-flaneur.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tokyo-kasei.ac.jp Improper Access Control vulnerability

Open Bug Bounty ID: OBB-593455 Description| Value ---|--- Affected Website:| tokyo-kasei.ac.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

onepiecetower.tokyo XSS vulnerability

Open Bug Bounty ID: OBB-570582 Description| Value ---|--- Affected Website:| onepiecetower.tokyo Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Someone Stole Almost Half a BILLION Dollars from Japanese Cryptocurrency Exchange

Coincheck, a Tokyo-based cryptocurrency exchange, has suffered what appears to be the biggest hack in the history of cryptocurrencies, losing $532 million in digital assets nearly $420 million in NEM tokens and $112 in Ripples. In 2014, Mt Gox, one of the largest bitcoin exchange at that time,...

ginza6.tokyo XSS vulnerability

Open Bug Bounty ID: OBB-515300 Description| Value ---|--- Affected Website:| ginza6.tokyo Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosur...

japanhomesearch.com XSS vulnerability

Open Bug Bounty ID: OBB-448263 Description| Value ---|--- Affected Website:| japanhomesearch.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

blogmetrics.org XSS vulnerability

Open Bug Bounty ID: OBB-382787 Description| Value ---|--- Affected Website:| blogmetrics.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

TippingPoint Threat Intelligence and Zero-Day Coverage – Week of October 23, 2017

Just like Bugs Bunny wears disguises to avert his enemies, there’s another “wascally” rabbit causing trouble in the form of ransomware. Bad Rabbit is the latest ransomware campaign hitting Eastern European countries with what looks like a variant of the Petya/NotPetya ransomware. Bad Rabbit sprea...

pigment.tokyo XSS vulnerability

Vulnerable URL: https://pigment.tokyo/product/?q==min=max=range==xss%22%3E%3Csvg/onload=prompt%27openbugbounty%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1235659 VIP...

lifetech.tokyo Open Redirect vulnerability

Vulnerable URL: http://lifetech.tokyo/shogichannel/redirect?rssId=3334=https://openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.12.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated V...

Design/Logic Flaw

The Bank of Tokyo-Mitsubishi UFJ, Ltd. App for Android ver5.3.1, ver5.2.2 and earlier allow a man-in-the-middle attacker to downgrade the communication between the app and the server from TLS v1.2 to SSL v3.0, which may result in the attacker to eavesdrop on an encrypted communication...