ioc.u-tokyo.ac.jp XSS vulnerability

Open Bug Bounty ID: OBB-667752 Description| Value ---|--- Affected Website:| ioc.u-tokyo.ac.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

iam.u-tokyo.ac.jp XSS vulnerability

Open Bug Bounty ID: OBB-664911 Description| Value ---|--- Affected Website:| iam.u-tokyo.ac.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ssjda.iss.u-tokyo.ac.jp XSS vulnerability

Open Bug Bounty ID: OBB-663969 Description| Value ---|--- Affected Website:| ssjda.iss.u-tokyo.ac.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tokyo-sva.com XSS vulnerability

Open Bug Bounty ID: OBB-640157 Description| Value ---|--- Affected Website:| tokyo-sva.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tic-tokyo.co.jp XSS vulnerability

Open Bug Bounty ID: OBB-613280 Description| Value ---|--- Affected Website:| tic-tokyo.co.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

vision-tokyo.com XSS vulnerability

Open Bug Bounty ID: OBB-607715 Description| Value ---|--- Affected Website:| vision-tokyo.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tokyo-flaneur.com XSS vulnerability

Open Bug Bounty ID: OBB-596124 Description| Value ---|--- Affected Website:| tokyo-flaneur.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tokyo-kasei.ac.jp Improper Access Control vulnerability

Open Bug Bounty ID: OBB-593455 Description| Value ---|--- Affected Website:| tokyo-kasei.ac.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

onepiecetower.tokyo XSS vulnerability

Open Bug Bounty ID: OBB-570582 Description| Value ---|--- Affected Website:| onepiecetower.tokyo Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Someone Stole Almost Half a BILLION Dollars from Japanese Cryptocurrency Exchange

Coincheck, a Tokyo-based cryptocurrency exchange, has suffered what appears to be the biggest hack in the history of cryptocurrencies, losing $532 million in digital assets nearly $420 million in NEM tokens and $112 in Ripples. In 2014, Mt Gox, one of the largest bitcoin exchange at that time,...

ginza6.tokyo XSS vulnerability

Open Bug Bounty ID: OBB-515300 Description| Value ---|--- Affected Website:| ginza6.tokyo Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosur...

japanhomesearch.com XSS vulnerability

Open Bug Bounty ID: OBB-448263 Description| Value ---|--- Affected Website:| japanhomesearch.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

blogmetrics.org XSS vulnerability

Open Bug Bounty ID: OBB-382787 Description| Value ---|--- Affected Website:| blogmetrics.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

TippingPoint Threat Intelligence and Zero-Day Coverage – Week of October 23, 2017

Just like Bugs Bunny wears disguises to avert his enemies, there’s another “wascally” rabbit causing trouble in the form of ransomware. Bad Rabbit is the latest ransomware campaign hitting Eastern European countries with what looks like a variant of the Petya/NotPetya ransomware. Bad Rabbit sprea...

pigment.tokyo XSS vulnerability

Vulnerable URL: https://pigment.tokyo/product/?q==min=max=range==xss%22%3E%3Csvg/onload=prompt%27openbugbounty%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1235659 VIP...

lifetech.tokyo Open Redirect vulnerability

Vulnerable URL: http://lifetech.tokyo/shogichannel/redirect?rssId=3334=https://openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.12.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated V...

Design/Logic Flaw

The Bank of Tokyo-Mitsubishi UFJ, Ltd. App for Android ver5.3.1, ver5.2.2 and earlier allow a man-in-the-middle attacker to downgrade the communication between the app and the server from TLS v1.2 to SSL v3.0, which may result in the attacker to eavesdrop on an encrypted communication...

CVE-2016-7812

The Bank of Tokyo-Mitsubishi UFJ, Ltd. App for Android ver5.3.1, ver5.2.2 and earlier allow a man-in-the-middle attacker to downgrade the communication between the app and the server from TLS v1.2 to SSL v3.0, which may result in the attacker to eavesdrop on an encrypted communication...

CVE-2016-7812

CVE-2016-7812 affects Bank of Tokyo-Mitsubishi UFJ Android apps (versions 5.3.1, 5.2.2 and earlier). The vulnerability allows a man-in-the-middle to downgrade TLS v1.2 to SSL v3.0, enabling eavesdropping on encrypted traffic and exposing the session to POODLE-like weaknesses. Connected sources (N...

CVE-2016-7812

The Bank of Tokyo-Mitsubishi UFJ, Ltd. App for Android ver5.3.1, ver5.2.2 and earlier allow a man-in-the-middle attacker to downgrade the communication between the app and the server from TLS v1.2 to SSL v3.0, which may result in the attacker to eavesdrop on an encrypted communication...