Apple will proxy Safe Browsing requests to hide iOS users' IP from Google

Apple's upcoming iOS 14.5 update will come with a new feature that will redirect all fraudulent website checks through its own proxy servers as a workaround to preserve user privacy and prevent leaking IP addresses to Google. A built-in security-focused feature in the Safari browser, "Fraudulent...

Apple will proxy Safe Browsing requests to hide iOS users' IP from Google

Apple's upcoming iOS 14.5 update will come with a new feature that will redirect all fraudulent website checks through its own proxy servers as a workaround to preserve user privacy and prevent leaking IP addresses to Google. A built-in security-focused feature in the Safari browser, "Fraudulent...

CVE-2020-27874

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat 7.0.18. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM...

CVE-2020-27874

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat 7.0.18. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat 7.0.18. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM...

CVE-2020-27874

The CVE-2020-27874 entry concerns Tencent WeChat 7.0.18 with a vulnerability in the WXAM Decoder. The flaw results from improper validation of user-supplied data, causing memory access past the end of an allocated object and leading to remote code execution. Exploitation requires user interaction...

CVE-2020-27874

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat 7.0.18. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM...

Penguin Aurora Box has an unauthorized access vulnerability

Penguin Aurora Box is a high-end network HD set-top box produced by Tencent Video in conjunction with Skyworth Digital. An unauthorized access vulnerability exists in Penguin Aurora Box. An attacker can exploit the vulnerability to gain unauthorized access to a specific link to remotely control a...

Tencent WeChat WXAM Decoder Out-Of-Bounds Access Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM Decoder. T...

Penguin Gaming PC client suffers from dll hijacking vulnerability (CNVD-2021-08537)

Penguin Gaming is the largest mobile gaming platform under Tencent. A dll hijacking vulnerability exists in the PC client of Penguin Gaming. An attacker can exploit this vulnerability to execute malicious code...

Shenzhen Tencent Computer System Co., Ltd. government weibo has dll hijacking vulnerability (CNVD-2021-09532)

Government WeChat is a smart office solution for the government provided by Tencent's Enterprise WeChat team on the basis of the original Enterprise WeChat. Shenzhen Tencent Computer Systems Limited Government WeChat has a dll hijacking vulnerability, which can be exploited by attackers to cause...

Shenzhen Tencent Computer Systems Limited Government WeChat suffers from dll hijacking vulnerability

Government WeChat is a smart office solution for the government provided by Tencent's Enterprise WeChat team on the basis of the original Enterprise WeChat. Shenzhen Tencent Computer Systems Limited Government WeChat has a dll hijacking vulnerability, which can be exploited by attackers to cause...

Shenzhen Tencent Computer System Co., Ltd.'s Government WeChat suffers from dll hijacking vulnerability (CNVD-2021-09531)

Government WeChat is a smart office solution for the government provided by Tencent's Enterprise WeChat team on the basis of the original Enterprise WeChat. Shenzhen Tencent Computer Systems Limited Government WeChat has a dll hijacking vulnerability, which can be exploited by attackers to cause...

TIM for Windows suffers from dll hijacking vulnerability

TIM is a multi-platform client application released in November 2016 by Tencent. It supports QQ and WeChat login, and is named "TIM". A dll hijacking vulnerability exists in TIM Windows Edition. An attacker can use this vulnerability to load a malicious dll and execute malicious code...

Penguin Gaming has a dll hijacking vulnerability (CNVD-2021-11799)

Penguin Gaming is a mobile gaming platform under Tencent. It is located in the "connector" of the e-sports ecosystem, integrating the resources of Tencent.com, QQ Hand Games and Tencent Hublot, and cooperating in depth with professional e-sports events such as QGC and TGA. Penguin Gaming has a dl...

Penguin Gaming has a dll hijacking vulnerability

Penguin Gaming is a mobile gaming platform under Tencent. It is located in the "connector" of the e-sports ecosystem, integrating the resources of Tencent.com, QQ Hand Games and Tencent Hublot, and cooperating in depth with professional e-sports events such as QGC and TGA. Penguin Gaming has a dl...

Penguin Gaming has a dll hijacking vulnerability

Penguin Gaming is Tencent's mobile gaming platform. It is located in the "connector" of the e-sports ecosystem, integrating the resources of Tencent.com, QQ Hand Games, and Tencent Mutual Entertainment team, and cooperating deeply with professional e-sports events such as QGC and TGA. Penguin...

Penguin Gaming has a dll hijacking vulnerability (CNVD-2021-11800)

Penguin Gaming is a mobile gaming platform under Tencent. It is located in the "connector" of the e-sports ecosystem, integrating the resources of Tencent.com, QQ Hand Games and Tencent Hublot, and cooperating in depth with professional e-sports events such as QGC and TGA. Penguin Gaming has a dl...

Tencent Penguin Tutoring PC version suffers from DLL hijacking vulnerability

Tencent Penguin Tutoring for PC is an educational software, is a tutoring application launched by Tencent for primary and secondary school students to learn. Tencent Penguin Tutoring PC version of the existence of DLL hijacking vulnerability, attackers can use this vulnerability to obtain control...

Tencent Penguin Tutoring PC version suffers from DLL hijacking vulnerability (CNVD-2021-05483)

Tencent Penguin Tutoring for PC is an educational software, is a tutoring application launched by Tencent for primary and secondary school students to learn. Tencent Penguin Tutoring PC version of the existence of DLL hijacking vulnerability, attackers can use this vulnerability to obtain control...