Malicious Package in sj-tw-test-security

All versions of sj-tw-test-security contain malicious code. The package downloads and runs a script that opens a reverse shell in the system. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer...

PT-2020-21487

Name of the Vulnerable Software and Affected Versions sj-tw-test-security versions all versions Description The issue concerns malicious code within the software. This code downloads and runs a script, resulting in a reverse shell being opened in the system. Any computer with this package install...

PT-2020-21087

Name of the Vulnerable Software and Affected Versions sj-tw-sec versions affected versions not specified Description The issue concerns malicious code within the sj-tw-sec package, which downloads and runs a script. This script opens a reverse shell in the system, potentially leading to full...

PT-2020-21015

Name of the Vulnerable Software and Affected Versions sj-tw-abc versions affected versions not specified Description The issue concerns malicious code within the sj-tw-abc package, which downloads and runs a script. This script opens a reverse shell in the system, potentially giving an outside...

tw-superdraw-61.com Cross Site Scripting vulnerability OBB-1290750

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2019:1325-1 Rating: important References: 1133313 Cross-References: CVE-2019-5805 CVE-2019-5806 CVE-2019-5807 CVE-2019-5808 CVE-2019-5809 CVE-2019-5810 CVE-2019-5811 CVE-2019-5812 CVE-2019-5813 CVE-2019-5814...

hg3006.tw XSS vulnerability

Open Bug Bounty ID: OBB-718611 Description| Value ---|--- Affected Website:| hg3006.tw Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

9x9.tw XSS vulnerability

Open Bug Bounty ID: OBB-632515 Description| Value ---|--- Affected Website:| 9x9.tw Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

5513595.tw XSS vulnerability

Open Bug Bounty ID: OBB-626924 Description| Value ---|--- Affected Website:| 5513595.tw Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

5295.tw XSS vulnerability

Open Bug Bounty ID: OBB-547033 Description| Value ---|--- Affected Website:| 5295.tw Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tw-youli.com XSS vulnerability

Open Bug Bounty ID: OBB-531381 Description| Value ---|--- Affected Website:| tw-youli.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

xn--hds84jc2ezya73tz1i16z.tw XSS vulnerability

Open Bug Bounty ID: OBB-531349 Description| Value ---|--- Affected Website:| xn--hds84jc2ezya73tz1i16z.tw Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

xn--9ess9ivzfernsp1btha.tw XSS vulnerability

Open Bug Bounty ID: OBB-531337 Description| Value ---|--- Affected Website:| xn--9ess9ivzfernsp1btha.tw Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ms7.tw XSS vulnerability

Open Bug Bounty ID: OBB-284596 Description| Value ---|--- Affected Website:| ms7.tw Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

KissGallery 1.0.0, SQL Injection

KissGallery version 1.0.0 by TW Carter, SQL Injection...

CVE-2015-7246: Use of Hard-coded Credentials

D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 has a default password of root for the root account and tw for the tw account, which makes it easier for remote attackers to obtain administrative access...

Shuttle Tech ADSL Wireless 920 WM - Multiple Vulnerabilities

Shuttle Tech ADSL Wireless 920 WM - Multiple Vulnerabilities Exploit Title : Shuttle Tech ADSL WIRELESS 920 WM - Multiple Vulnerabilities Version: Gan9.8U6X-B-TW-R1B0201T1RP Exploit Author : Persian Hack Team Tested on Win Date 2016/12/05 1. Cross Site Scripting PoC : First We Need To login To...

CVE-2014-6648

The iPhone4.TW aka com.tapatalk.iPhone4TWforums application 3.3.20 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The iPhone4.TW aka com.tapatalk.iPhone4TWforums application 3.3.20 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6648

The iPhone4.TW aka com.tapatalk.iPhone4TWforums application 3.3.20 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...