248 matches found
SUSE CVE-2009-1374
Buffer overflow in the decryptout function in Pidgin formerly Gaim before 2.5.6 allows remote attackers to cause a denial of service application crash via a QQ packet...
CVE-2021-33057
The QQ application 8.7.1 for Android and iOS does not enforce the permission requirements e.g., android.permission.ACCESSFINELOCATION for determining the device's physical location. An attacker can use qq.createMapContext to create a MapContext object, use MapContext.moveToLocation to move the...
CVE-2021-33057
The QQ application 8.7.1 for Android and iOS does not enforce the permission requirements e.g., android.permission.ACCESSFINELOCATION for determining the device's physical location. An attacker can use qq.createMapContext to create a MapContext object, use MapContext.moveToLocation to move the...
Design/Logic Flaw
The QQ application 8.7.1 for Android and iOS does not enforce the permission requirements e.g., android.permission.ACCESSFINELOCATION for determining the device's physical location. An attacker can use qq.createMapContext to create a MapContext object, use MapContext.moveToLocation to move the...
CVE-2021-33057
The CVE-2021-33057 entry concerns Tencent QQ version 8.7.1 on Android and iOS. The issue is that QQ does not enforce location permission requirements (e.g., android.permission.ACCESS_FINE_LOCATION) when determining the device’s physical location. An attacker can use qq.createMapContext to instant...
CVE-2021-33057
The QQ application 8.7.1 for Android and iOS does not enforce the permission requirements e.g., android.permission.ACCESSFINELOCATION for determining the device's physical location. An attacker can use qq.createMapContext to create a MapContext object, use MapContext.moveToLocation to move the...
PT-2022-10197 · Tencent · Qq
Name of the Vulnerable Software and Affected Versions: QQ application version 8.7.1 Description: The issue concerns the QQ application's failure to enforce permission requirements for determining a device's physical location, such as android.permission.ACCESS FINE LOCATION. An attacker can exploi...
Tencent QQ 安全漏洞
Tencent QQ is a multi-platform instant messaging software from China's Tencent. It supports text, voice and video chatting, as well as file sharing, network hard disk, mailboxes, games, forums, online shopping, renting and job hunting. A security vulnerability exists in Tencent QQ version 8.7.1,...
Malicious code in qq-web-login (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7603e671a15b80daca7e87077897f28f0d260965f7c5d5ec50f93bf695a0f35 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in qq-qrcode-login (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5dc5a231da669d82038a77d061637b848b5258d7598c0ffe30c1e13612d3b68c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5556 Malicious code in qq-qrcode-login (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5dc5a231da669d82038a77d061637b848b5258d7598c0ffe30c1e13612d3b68c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Fedora: Security Advisory for pidgin (FEDORA-2022-4490dce823)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 35 Update: pidgin-2.14.6-3.fc35
Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just add an...
QQ Credential Gatherer
This module searches for QQ credentials on a Windows host. Module Options msf use post/windows/gather/credentials/qq msf postqq show actions ...actions... msf postqq set ACTION msf postqq show options ...show and set options... msf postqq run This module requires Metasploit:...
XSS Vulnerability in WeChat Public Number Backend System
WeChat public number belongs to Tencent, is the developer or business in the WeChat public platform application account, the account and QQ account interoperability, the platform to achieve and specific groups of text, pictures, voice, video, a full range of communication, interaction , the...
Tencent QQ PC version suffers from a local power lifting vulnerability
Tencent QQ is a chat software. Tencent QQ PC version suffers from a local privilege extraction vulnerability, which can be exploited by attackers to obtain administrator privileges and execute malicious code...
CVE-2021-3404
creationtimestamp| type| source ---|---|--- 2021-03-05 00:47:04+00:00| seen| https://t.me/cibsecurity/24480...
Janus Signature Vulnerability in QQ Extreme Edition for Android
QQ Extreme is a chatting and socializing app. A Janus signature vulnerability exists in QQ Extreme Edition for Android. An attacker can exploit the vulnerability to gain server privileges...
Memory Corruption Vulnerability in QQ Video for Windows
QQ Video is a local player from Tencent that supports movie and music files in any format. A memory corruption vulnerability exists in QQ Video for Windows, which can be exploited by attackers to cause the program to crash...
Memory corruption vulnerability exists in QQ Video for Windows (CNVD-2021-17324)
QQ Video is a local player from Tencent that supports movie and music files in any format. A memory corruption vulnerability exists in QQ Video for Windows, which can be exploited by attackers to cause the program to crash...