CVE-2019-20001: Undefined Security Weakness

An issue was discovered in RICOH Streamline NX Client Tool and RICOH Streamline NX PC Client that allows attackers to escalate local privileges...

Code Execution Vulnerability in IS Voice PC Client

IS Voice was once a voice online group chat tool designed and developed specifically for Chinese players, and is now an entertainment community platform that integrates video performances, Karaoke entertainment, and social interaction. A code execution vulnerability exists in the IS Voice PC...

Oriental Fortune PC client suffers from dll hijacking vulnerability

Oriental Wealth PC Client is a free stock speculation software developed by Oriental Wealth. There is a dll hijacking vulnerability in Oriental Wealth PC Client, which can be exploited by attackers to execute arbitrary code...

DLL Hijacking Vulnerability in WeChat PC Client

WeChat is a chatting and socializing software from Shenzhen Tencent Computer System Co. A DLL hijacking vulnerability exists in the WeChat PC client, which can be exploited by attackers to execute malicious code...

DLL Hijacking Vulnerability in MiChat PC Client Software

MiChat is multi-platform instant messaging software. It supports voice, picture, video, text, red envelope, broadcast, video phone, remote assistance, screen sharing. MiChat pc client software has a DLL hijacking vulnerability, which can be exploited by an attacker to inject an executable DLL fil...

Ali Want Want pc client software suffers from DLL hijacking vulnerability

Ali Want Want is a new business communication software, Ali Want Want buyer version of Taobao shopping with the communication needs of the combination of a lot of online shopping features, to create China's largest e-commerce first IM. Ali Want Want pc client software there is a DLL hijacking...

DLL Hijacking Vulnerability in Ali Qianniu's pc Client Software

Qianniu Workbench is a seller belonging to Alibaba is a free online business communication software customized for merchants. Aliqianniu pc client software suffers from a DLL hijacking vulnerability, which can be exploited by an attacker to inject an executable DLL file into the client process an...

DLL Hijacking Vulnerability in EaseUS pc Client Software

YiXin is an instant messaging software jointly developed by NetEase and China Telecom. The PC version of YiXin focuses on free chatting features, as well as high-definition chatting voice, posting emoticons and so on. There is a DLL hijacking vulnerability in EaseUS pc client software, which can ...

DLL Hijacking Vulnerability in Karaoke Companion PC Client Software

Karaoke Companion is a karaoke software specially designed and produced for friends who love to sing, Karaoke Companion can help you create a variety of sound effects, including electric sound, vibrato, echo and so on. Karaoke Partner pc client software has a DLL hijacking vulnerability that can ...

Tencent TIM pc client software suffers from a command execution vulnerability

TIM, QQ Office Simple Edition, is a cross-platform communication tool that focuses on teamwork. Tencent TIM pc client software has a command execution vulnerability, the software PC client can allow an attacker to inject executable DLL files into the client process to execute arbitrary functions...

Kingsoft pdf pc client software has a command execution vulnerability

Kingsoft PDF is by Kingsoft Office Software Limited out of a PDF file format for reading and processing tools. Kingsoft pdf pc client software there are command execution vulnerabilities, the software PC client can allow an attacker to inject executable DLL files in the client process, the...

Command Execution Vulnerability in Tencent QQ pc Client Software

QQ, short for Tencent QQ, is an Internet-based instant messaging IM software developed by Tencent. A command execution vulnerability exists in the Tencent QQ pc client software, where the software PC client can allow an attacker to inject executable DLL files into the client process to perform...

WeChat pc client software suffers from arbitrary code execution vulnerability

WeChat is a free application launched by Tencent to provide instant messaging services for smart terminals. The WeChat pc client software suffers from an arbitrary code execution vulnerability, which can be exploited by an attacker with the help of malware to execute arbitrary code DLL files on t...

Youku client update process suffers from arbitrary file download vulnerability

Youku PC client is a video player that supports both online and local use. An arbitrary file download vulnerability exists in the Youku PC client update process. The vulnerability is caused by the client update process using an insecure HTTP communication protocol to interact with the server, and...

Memory corruption vulnerability exists in Sohu Video 5 (CNVD-2017-35531)

Sohu Video 5 is a video player from Sohu. A memory corruption vulnerability exists in the Sohu Video 5 PC client when opening certain mov files, which can be exploited by attackers to cause a denial of service or code execution...

Memory Corruption Vulnerability in Storm Video 5 PC Client

Storm Video 5 is a video player from Beijing Storm Technology Co. Storm Video 5 PC client when opening specific 3gp files = A memory corruption vulnerability exists, which can be exploited by attackers to cause a denial of service...

CVE-2016-8274

CVE-2016-8274 refers to a DLL hijacking vulnerability in Huawei HiSuite PC client software, specifically version 4.0.5.300_OVE. The root cause is insufficient verification of loaded system DLL files, which can allow an attacker to cause the system to load a malicious DLL and execute arbitrary cod...

CVE-2016-8273: Improper Input Validation

Huawei PC client software HiSuite 4.0.5.300OVE uses insecure HTTP for upgrade software package download and does not check the integrity of the software package before installing; an attacker can launch an MITM attack to interrupt or replace the downloaded software package and further compromise...

Security Advisory - Multiple Security Vulnerabilities in Huawei HiSuite

Huawei HiSuite PC client software has an information leak vulnerability. The software provides the function for configuring the proxy server. The password textbox on the proxy configuration UI do not disable the password copy function. An attacker who can log in to the system can copy out the...

CVE-2008-3157

CVE-2008-3157 affects Nortel SIP Multimedia PC Client 4.x MCS5100 and MCS5200. The vulnerability stems from not limiting concurrent sessions, enabling denial of service via a large number of sessions. The NVD lists a CVSS v2 base score of 5.0 (Medium) with network access, low attack complexity, a...