Bug Bounty

WiKi Security continuously reports security vulnerabilities through the KISA Bug Bounty Program, steadily strengthening its real-world detection and analysis capabilities.

2024 Reports

  • KVE-2024-0771 Extensive Personal Information Exposure in the BMW-Vantage JoyMall Mobile Application
  • KVE-2024-0770 Price Manipulation in the Electronic Payment Process for Driving Center Product Purchases at BMW Korea

2023 Reports

  • KVE-2023-0263 Insufficient Parameter Validation Vulnerability on the OO Regional Website
  • KVE-2023-0310 Information Exposure Vulnerability in the ID Retrieval Function of D University’s Portal System
  • KVE-2023-5203 Excessive Error Information Exposure Vulnerability in HYBE Affiliate Websites
  • KVE-2023-5282 Information Exposure Vulnerability in G University’s Academic Administration System
  • KVE-2023-5283 Personal Information Leakage Vulnerability in O University’s SSO System

2022 Reports

  • KVE-2022-0695 Multiple Vulnerabilities in the SIHAS IoT (SIHAS) Web Server
  • KVE-2022-0696 Reflected XSS Vulnerabilities in SIHAS IoT (SIHAS) and SixShop
  • KVE-2022-0697 Stored XSS Vulnerabilities in SIHAS IoT (SIHAS) and SixShop
  • KVE-2022-0698 Authentication Weakness and Parameter Tampering Vulnerabilities in SIHAS IoT (SIHAS)
  • KVE-2022-2187 Reflected XSS Vulnerability in the Imweb (imweb) Website
  • KVE-2022-2188 Stored XSS Vulnerability in the Imweb (imweb) Website

2021 Reports

  • KVE-2021-2038 Parameter Manipulation Vulnerability in the Sono Hotels & Resorts Mobile Application
  • KVE-2021-1825 Parameter Manipulation Vulnerability in the BMW Mobile Application
  • KVE-2021-0153 Exposure of Personal and Internal Information in the AMANO Parking Management System