153 matches found
Linux kernel security vulnerabilities
The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel that originates from a reuse-after-release vulnerability in twtimerhandler...
tw-group-web.com Cross Site Scripting vulnerability OBB-3588209
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Adiscon LogAnalyzer v.4.1.13 - Cross Site Scripting Vulnerability
Exploit Title: Adiscon LogAnalyzer v.4.1.13 - Cross Site Scripting Exploit Author: Pedro ISSDU TW Vendor Homepage: https://loganalyzer.adiscon.com/ Software Link: https://loganalyzer.adiscon.com/download/ Version: v4.1.13 and before Tested on: Linux CVE : CVE-2023-36306 There are several...
9x9.tw Cross Site Scripting vulnerability OBB-3566804
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
ttia-tw.org Cross Site Scripting vulnerability OBB-3496669
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
yes3391699.tw Improper Access Control vulnerability OBB-2557842
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
tw-voyages.com Cross Site Scripting vulnerability OBB-2539886
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
x831.tw Cross Site Scripting vulnerability OBB-2369231
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2022-28307
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.27 through 4.14.260 Description A use-after-free issue was discovered in the tw timer handler function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...
PT-2022-28344
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.27 through 5.15.12 Description A use-after-free issue was discovered in the tw timer handler function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 2.6....
PT-2022-28331
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.90 Description A use-after-free issue was discovered in the tw timer handler function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v2.6.27 and is...
PT-2022-28312
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.224 Description A use-after-free issue was discovered in the tw timer handler function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...
PT-2022-28304
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.27 through 4.9.295 Description A use-after-free issue was discovered in the tw timer handler function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 2.6....
PT-2022-28300
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.298 Description A use-after-free issue was discovered in the tw timer handler function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v2.6.27 and is...
PT-2022-28321
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.170 Description A use-after-free issue was discovered in the tw timer handler function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...
tw-mold.com Cross Site Scripting vulnerability OBB-2308878
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Mitsubishi Electric Air Conditioning System
1. EXECUTIVE SUMMARY CVSS v3 7.1 ATTENTION: Exploitable remotely Vendor: Mitsubishi Electric Equipment: Multiple Air Conditioning Systems Vulnerability: Incorrect Implementation of Authentication Algorithm 2. RISK EVALUATION An attacker could exploit this vulnerability by impersonating...
inquiry.polaris.net.tw Cross Site Scripting vulnerability OBB-1484119
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
lake16.tw Cross Site Scripting vulnerability OBB-1322230
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Malicious Package in sj-tw-sec
All versions of sj-tw-sec contain malicious code. The package downloads and runs a script that opens a reverse shell in the system. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...