WIKI Security specialists participate in domestic and international bug bounty programs, researching and reporting previously unknown vulnerabilities (zero-day). This work continually maintains both operational capability and research and development capability, so that we can provide clients with technical expertise proven in live engagements and in the field.
2025
- KVE-2025-0170 SQL injection vulnerability in a marathon registration website, exposing a large volume of personal information
2024
- KVE-2024-0771 Exposure of a large volume of personal information in the BMW-Vantage JoyMall mobile app
- KVE-2024-0770 Price tampering in electronic payment for product purchases at the BMW Korea Driving Center
2023
- KVE-2023-0263 Insufficient parameter validation on an OO regional website
- KVE-2023-0310 Information disclosure in the ID lookup function of the ㄷ University portal
- KVE-2023-5203 Excessive error-information disclosure on HYBE-affiliated websites
- KVE-2023-5282 Information disclosure in the ㄱ University academic affairs system
- KVE-2023-5283 Personal information leakage in the O University SSO system
2022
- KVE-2022-0695 Multiple vulnerabilities in the SIHAS IoT web server
- KVE-2022-0696 Reflected XSS in SIHAS IoT and Sixshop
- KVE-2022-0697 Stored XSS in SIHAS IoT and Sixshop
- KVE-2022-0698 Insufficient authentication and parameter tampering in SIHAS IoT
- KVE-2022-2187 Reflected XSS on imweb websites
- KVE-2022-2188 Stored XSS on imweb websites
2021
- KVE-2021-2038 Parameter vulnerability at Sono Hotels & Resorts (Sono Hotels & Resorts mobile app)
- KVE-2021-1825 Parameter vulnerability in BMW (BMW mobile app)
- KVE-2021-0153 Exposure of personal and internal information (AMANO parking management system)