Sme.UP ERP security vulnerabilities

Sme.UP ERP is a management software developed to meet the needs of customers by Sme.UP Italy. A security vulnerability exists in Sme.UP ERP TOKYO version V6R1M220406, which originates from the presence of an information disclosure vulnerability that can be exploited by an attacker to gain access ...

Sme.UP ERP TOKYO V6R1M220406 Operating System Command Injection Vulnerability

Sme.UP ERP is a management software developed by Sme.UP Italy to meet the needs of its customers. A security vulnerability exists in Sme.UP ERP TOKYO V6R1M220406 version, which originates from the presence of an operating system command injection vulnerability...

Sme.UP ERP TOKYO V6R1M220406: Path traversal vulnerability

Sme.UP ERP is a management software developed by Sme.UP, an Italian company, to meet the needs of its customers. A security vulnerability exists in Sme.UP ERP TOKYO V6R1M220406 version, which originates from an arbitrary file download vulnerability...

PT-2023-20783 · Ibm · As/400

Name of the Vulnerable Software and Affected Versions: Sme.UP ERP TOKYO version V6R1M220406 Description: The issue allows attackers to access cleartext credentials needed to authenticate to the AS400 system via the "/debug" endpoint. This enables unauthorized access to sensitive information...

tokyo.mochikaeri.info Cross Site Scripting vulnerability OBB-3193769

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

tokyoautosalon.jp Cross Site Scripting vulnerability OBB-3131920

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

tokyohk.brandoff.com.hk Cross Site Scripting vulnerability OBB-3117445

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cart.bihaku.tokyo Cross Site Scripting vulnerability OBB-3074454

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

tokyoarchitecture.info Cross Site Scripting vulnerability OBB-3000989

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

tic-tokyo.co.jp Cross Site Scripting vulnerability OBB-2982133

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

tokyonishikan.co.jp Cross Site Scripting vulnerability OBB-2939245

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

orientationtokyo.com Cross Site Scripting vulnerability OBB-2929521

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

london-tokyo.co.uk Cross Site Scripting vulnerability OBB-2849712

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

tokyomentalhealth.com Cross Site Scripting vulnerability OBB-2708035

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

tokyo-shoemakers.jp Cross Site Scripting vulnerability OBB-2703842

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress Button Widget Smartsoft plugin <= 1.0.1 - Cross-Site Request Forgery (CSRF) vulnerability to Cross-Site Scripting (XSS)

Cross-Site Request Forgery CSRF vulnerability to Cross-Site Scripting XSS was discovered by Ryo Onodera Cryptography Laboratory Tokyo Denki University in the WordPress Button Widget Smartsoft plugin versions = 1.0.1. Solution Deactivate and delete. This plugin has been closed as of June 8, 2022 a...

WordPress ToolBar to Share plugin <= 2.0 - Cross-Site Request Forgery (CSRF) vulnerability to Cross-Site Scripting (XSS)

Cross-Site Request Forgery CSRF vulnerability leading to Cross-Site Scripting XSS discovered by Sho Sakata Cryptography Laboratory at Tokyo Denki University in WordPress ToolBar to Share plugin versions = 2.0. Solution Deactivate and delete. This plugin has been closed as of May 31, 2022 and is n...

WordPress Copify plugin <= 1.3.0 - Cross-Site Request Forgery (CSRF) vulnerability to Cross-Site Scripting (XSS)

Cross-Site Request Forgery CSRF vulnerability to Cross-Site Scripting XSS was discovered by Yuki Hoshi Cryptography Laboratory in Tokyo Denki University in the WordPress Copify plugin versions = 1.3.0 Solution Deactivate and delete. This plugin has been closed as of May 27, 2022 and is not...

tokyo-marui.co.jp Cross Site Scripting vulnerability OBB-2639573

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress WPMK Ajax Finder plugin <= 1.0.1 - Stored Cross-Site Scripting (XSS) via CSRF vulnerability

Stored Cross-Site Scripting XSS via CSRF vulnerability discovered by Tsubasa Imaizumi Cryptography Laboratory in Tokyo Denki University in WordPress WPMK Ajax Finder plugin versions = 1.0.1. Solution Deactivate and delete. This plugin has been closed as of May 17, 2022 and is not available for...