129 matches found
Mitsubishi Electric Air Conditioning System
1. EXECUTIVE SUMMARY CVSS v3 7.1 ATTENTION: Exploitable remotely Vendor: Mitsubishi Electric Equipment: Multiple Air Conditioning Systems Vulnerability: Incorrect Implementation of Authentication Algorithm 2. RISK EVALUATION An attacker could exploit this vulnerability by impersonating...
inquiry.polaris.net.tw Cross Site Scripting vulnerability OBB-1484119
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
lake16.tw Cross Site Scripting vulnerability OBB-1322230
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Malicious Package in sj-tw-sec
All versions of sj-tw-sec contain malicious code. The package downloads and runs a script that opens a reverse shell in the system. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package in sj-tw-test-security
All versions of sj-tw-test-security contain malicious code. The package downloads and runs a script that opens a reverse shell in the system. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer...
tw-superdraw-61.com Cross Site Scripting vulnerability OBB-1290750
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Security update for chromium (important)
openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2019:1325-1 Rating: important References: 1133313 Cross-References: CVE-2019-5805 CVE-2019-5806 CVE-2019-5807 CVE-2019-5808 CVE-2019-5809 CVE-2019-5810 CVE-2019-5811 CVE-2019-5812 CVE-2019-5813 CVE-2019-5814...
hg3006.tw XSS vulnerability
Open Bug Bounty ID: OBB-718611 Description| Value ---|--- Affected Website:| hg3006.tw Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...
9x9.tw XSS vulnerability
Open Bug Bounty ID: OBB-632515 Description| Value ---|--- Affected Website:| 9x9.tw Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
5513595.tw XSS vulnerability
Open Bug Bounty ID: OBB-626924 Description| Value ---|--- Affected Website:| 5513595.tw Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
5295.tw XSS vulnerability
Open Bug Bounty ID: OBB-547033 Description| Value ---|--- Affected Website:| 5295.tw Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
tw-youli.com XSS vulnerability
Open Bug Bounty ID: OBB-531381 Description| Value ---|--- Affected Website:| tw-youli.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
xn--hds84jc2ezya73tz1i16z.tw XSS vulnerability
Open Bug Bounty ID: OBB-531349 Description| Value ---|--- Affected Website:| xn--hds84jc2ezya73tz1i16z.tw Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
xn--9ess9ivzfernsp1btha.tw XSS vulnerability
Open Bug Bounty ID: OBB-531337 Description| Value ---|--- Affected Website:| xn--9ess9ivzfernsp1btha.tw Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
ms7.tw XSS vulnerability
Open Bug Bounty ID: OBB-284596 Description| Value ---|--- Affected Website:| ms7.tw Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
KissGallery 1.0.0, SQL Injection
KissGallery version 1.0.0 by TW Carter, SQL Injection...
Shuttle Tech ADSL Wireless 920 WM - Multiple Vulnerabilities
Shuttle Tech ADSL Wireless 920 WM - Multiple Vulnerabilities Exploit Title : Shuttle Tech ADSL WIRELESS 920 WM - Multiple Vulnerabilities Version: Gan9.8U6X-B-TW-R1B0201T1RP Exploit Author : Persian Hack Team Tested on Win Date 2016/12/05 1. Cross Site Scripting PoC : First We Need To login To...
CVE-2014-6648
The iPhone4.TW aka com.tapatalk.iPhone4TWforums application 3.3.20 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The iPhone4.TW aka com.tapatalk.iPhone4TWforums application 3.3.20 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6648
The iPhone4.TW aka com.tapatalk.iPhone4TWforums application 3.3.20 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...