907 matches found
Penguin Aurora TV Box 41502 安全漏洞
Skyworth Digital Penguin Aurora Tv Box is a high-end network HD set-top box from China's Skyworth Digital, produced by Tencent Video in conjunction with Skyworth Digital. A security vulnerability exists in Penguin Aurora TV Box 41502, which can be exploited by an attacker to gain unauthorized...
GHSA-PGJJ-866W-FC5C Risk of code injection
Impact Some routes use eval or Function constructor, which may be injected by the target site with unsafe code, causing server-side security issues Patches Temporarily removed the problematic route and added a no-new-func rule to eslint Self-built users should upgrade to 7f1c430 and later as soon...
Risk of code injection
Impact Some routes use eval or Function constructor, which may be injected by the target site with unsafe code, causing server-side security issues Patches Temporarily removed the problematic route and added a no-new-func rule to eslint Self-built users should upgrade to 7f1c430 and later as soon...
XStream is vulnerable to a Remote Command Execution attack
Impact The vulnerability may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required...
HolesWarm Malware Exploits Unpatched Windows, Linux Servers
By leveraging more than 20 known vulnerabilities in Linux and Windows servers, the HolesWarm cryptominer malware has been able to break into more than 1,000 cloud hosts just since June. The basic cryptominer botnet has been so successful at juggling so many different known vulnerabilities between...
XSS Vulnerability in WeChat Public Number Backend System
WeChat public number belongs to Tencent, is the developer or business in the WeChat public platform application account, the account and QQ account interoperability, the platform to achieve and specific groups of text, pictures, voice, video, a full range of communication, interaction , the...
Unauthorized access vulnerability in the security emergency response center of Shenzhen Tencent Computer System Co.
Shenzhen Tencent Computer System Co., Ltd. is an Internet technology company. The security emergency response center of Shenzhen Tencent Computer System Co., Ltd. has unauthorized access vulnerabilities, and attackers can use the vulnerabilities to obtain sensitive information...
Tencent's Self-Selected Stocks Have Logic Flaw Vulnerabilities
Tencent Self-Select is a securities investment mobile Internet application. Tencent Self-Select has a logic flaw vulnerability that can be exploited by an attacker to inject malicious code or modify the software logic to bypass forensics during the repackaging process...
Tencent Classroom Has Janus Android Signature Vulnerability
Tencent Classroom is a professional online education platform launched by Tencent. Tencent Classroom has a Janus Android signature vulnerability, which can be exploited by an attacker to obtain system root privileges...
Tencent Live suffers from Janus Android signature vulnerability
Tencent Live is a live streaming software. Tencent Live exists Janus Android signature vulnerability, attackers can use the vulnerability to obtain system root privileges...
Tencent Maps suffers from Janus Android signature vulnerability
Tencent Map is an Internet mapping service. Tencent Maps has a Janus Android signature vulnerability that can be exploited by an attacker to gain root access to the system...
Tencent Search Live Help has Janus Android Signature Vulnerability
Tencent search live help is professional skills online simply service platform. Tencent search live help exist Janus Android signature vulnerability, attackers can use the vulnerability to obtain system root privileges...
Tencent Guangdong Mahjong suffers from Janus Android signature vulnerability
Tencent Guangdong Mahjong is Tencent's first Guangdong Mahjong game. Tencent Guangdong Mahjong has a Janus Android signature vulnerability, which can be exploited by attackers to obtain system root privileges...
Tencent Happy Mahjong Full Existence Janus Android Signature Vulnerability
Tencent Happy Mahjong Full Set is Tencent's first classic 3D free mahjong game. Tencent Happy Mahjong Full Collection has Janus Android signature vulnerability, which can be exploited by attackers to obtain system root privileges...
Tencent Translator has information leakage vulnerability
Translator is Tencent's latest real-time conversation translation software, supporting Chinese, English, Japanese, Korean and other languages. It is characterized by accurate language recognition, high efficiency and free of charge. Tencent Translator has an information leakage vulnerability that...
CVE-2021-33879
Tencent GameLoop before 4.1.21.90 downloaded updates over an insecure HTTP connection. A malicious attacker in an MITM position could spoof the contents of an XML document describing an update package, replacing a download URL with one pointing to an arbitrary Windows executable. Because the only...
Design/Logic Flaw
Tencent GameLoop before 4.1.21.90 downloaded updates over an insecure HTTP connection. A malicious attacker in an MITM position could spoof the contents of an XML document describing an update package, replacing a download URL with one pointing to an arbitrary Windows executable. Because the only...
CVE-2021-33879
Tencent GameLoop before 4.1.21.90 downloads updates over HTTP, enabling MITM tampering of the update package XML. An attacker could replace the download URL with a path to an arbitrary Windows executable; the only integrity check is an MD5 comparison with the XML, allowing the executable to run o...
CVE-2021-33879
Tencent GameLoop before 4.1.21.90 downloaded updates over an insecure HTTP connection. A malicious attacker in an MITM position could spoof the contents of an XML document describing an update package, replacing a download URL with one pointing to an arbitrary Windows executable. Because the only...
