CVE-2020-24162

The Shenzhen Tencent app 5.8.2.5300 for PC platforms from Tencent App Center has a DLL hijacking vulnerability. Attackers can use this vulnerability to execute malicious code...

CVE-2020-24162

The Shenzhen Tencent app 5.8.2.5300 for PC platforms from Tencent App Center has a DLL hijacking vulnerability. Attackers can use this vulnerability to execute malicious code...

CVE-2020-24160

Shenzhen Tencent TIM Windows client 3.0.0.21315 has a DLL hijacking vulnerability, which can be exploited by attackers to execute malicious code...

Code injection

The Shenzhen Tencent app 5.8.2.5300 for PC platforms from Tencent App Center has a DLL hijacking vulnerability. Attackers can use this vulnerability to execute malicious code...

Code injection

Shenzhen Tencent TIM Windows client 3.0.0.21315 has a DLL hijacking vulnerability, which can be exploited by attackers to execute malicious code...

CVE-2020-24162

Technical details about CVE-2020-24162 are not publicly available in the provided Connected documents. Monitor for updates from vendors and CVE aggregators for affected products, root cause, impact and fixes.

CVE-2020-24162

The Shenzhen Tencent app 5.8.2.5300 for PC platforms from Tencent App Center has a DLL hijacking vulnerability. Attackers can use this vulnerability to execute malicious code...

CVE-2020-24160

The CVE-2020-24160 entry involves Shenzhen Tencent TIM Windows client 3.0.0.21315 and a DLL hijacking vulnerability that could allow a local attacker to execute arbitrary code. The available documents identify the vulnerability class (DLL hijack) and the affected product/version, but do not provi...

CVE-2020-24160

Shenzhen Tencent TIM Windows client 3.0.0.21315 has a DLL hijacking vulnerability, which can be exploited by attackers to execute malicious code...

Directory Traversal in tencent-server

Affected versions of tencent-server resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system...

GHSA-RR77-W4W8-W8WP Directory Traversal in tencent-server

Affected versions of tencent-server resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system...

DoubleGun Group Builds Massive Botnet Using Cloud Services

An operation from the China-based cybercrime gang known as DoubleGun Group has been disrupted, which had amassed hundreds of thousands of bots that were controlled via public cloud services, including Alibaba and Baidu Tieba. NetLab 360 researchers, in a recent posting, said that it noticed DNS...

Tencent App Store PC version suffers from DLL hijacking vulnerability

Tencent Application Treasure is an application acquisition platform created by Tencent Application Center. A DLL hijacking vulnerability exists in the PC version of Tencent App Store, which can be exploited by attackers to execute malicious code...

Tencent Weishi app suffers from unauthorized access vulnerability

Tencent Weishi is a short video creation and sharing platform of China's Tencent tencent. Users can browse, create and share all kinds of short videos on Weishi, as well as share videos on Weishi to friends and social platforms. An unauthorized access vulnerability exists in the Tencent Weishi ap...

Shenzhen Tencent Computer System Limited Tencent Online Game Accelerator suffers from DLL hijacking vulnerability

Tencent online game gas pedal is by an online game gas pedal tool. Shenzhen Tencent Computer Systems Limited Tencent online game gas pedal DLL hijacking vulnerability, an attacker can exploit the vulnerability in the client process to inject executable DLL file, to perform arbitrary functions...

Shenzhen Tencent Computer System Limited Tencent Game Box suffers from DLL hijacking vulnerability

Tencent game box is specially designed for web users to create game aids, with original hang-up bodyguard, convenient account multi-opening, exclusive game acceleration, selected game recommendations, high-quality game strategy, one-stop gift packages and other features. Shenzhen Tencent Computer...

Shenzhen Tencent Computer System Co., Ltd. QT Voice suffers from dll hijacking vulnerability

QT Voice Tencent voice chat tool is a team voice communication tool that supports multi-person voice communication. Shenzhen Tencent Computer Systems Limited QT voice dll hijacking vulnerability, an attacker can exploit the vulnerability in the client process to inject executable DLL file, to...

Tencent Ups Top Bug-Bounty Award to $15K

The Tencent Security Response Center TSRC is launching an expanded bug-bounty program, via the HackerOne white-hat platform – and the company has increased its top reward to $15,000. Tencent, a China-based global internet service provider, is opening up its existing bug-bounty program to...

DLL Hijacking Vulnerability in App Store

Application Treasure is a mobile application acquisition platform created by Tencent Application Center for smartphone users. Application Treasure suffers from a DLL hijacking vulnerability, which can be exploited by an attacker to load untrusted dynamic link libraries for command execution...

Tencent Computer Management has a dll hijacking vulnerability

Tencent PC Butler is a free security software from Tencent. Tencent Computer Manager has a dll hijacking vulnerability, which can be exploited by attackers to load untrustworthy dynamic link libraries for command execution...