Tencent WeChat WXAM Decoder Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM...

Tencent's Blue Whale Intelligent Cloud suffers from unauthorized access vulnerability

Blue Whale Smart Cloud, or Blue Whale for short, is a sub-brand of Tencent Smart Camp, a division of Tencent's Game Operations Department. It is a set of PaaS-based technology solutions that provides a comprehensive front- and back-office development framework, scheduling engine, public component...

Apple will proxy Safe Browsing requests to hide iOS users' IP from Google

Apple's upcoming iOS 14.5 update will come with a new feature that will redirect all fraudulent website checks through its own proxy servers as a workaround to preserve user privacy and prevent leaking IP addresses to Google. A built-in security-focused feature in the Safari browser, "Fraudulent...

Apple will proxy Safe Browsing requests to hide iOS users' IP from Google

Apple's upcoming iOS 14.5 update will come with a new feature that will redirect all fraudulent website checks through its own proxy servers as a workaround to preserve user privacy and prevent leaking IP addresses to Google. A built-in security-focused feature in the Safari browser, "Fraudulent...

CVE-2020-27874

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat 7.0.18. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM...

CVE-2020-27874

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat 7.0.18. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat 7.0.18. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM...

CVE-2020-27874

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat 7.0.18. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM...

CVE-2020-27874

The CVE-2020-27874 entry concerns Tencent WeChat 7.0.18 with a vulnerability in the WXAM Decoder. The flaw results from improper validation of user-supplied data, causing memory access past the end of an allocated object and leading to remote code execution. Exploitation requires user interaction...

CVE-2020-27874: Improper Restriction of Operations within the Bounds of a Memory Buffer

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat 7.0.18. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM...

Penguin Aurora Box has an unauthorized access vulnerability

Penguin Aurora Box is a high-end network HD set-top box produced by Tencent Video in conjunction with Skyworth Digital. An unauthorized access vulnerability exists in Penguin Aurora Box. An attacker can exploit the vulnerability to gain unauthorized access to a specific link to remotely control a...

PT-2021-11436

Name of the Vulnerable Software and Affected Versions: Tencent WeChat version 7.0.18 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw...

Tencent WeChat WXAM Decoder Out-Of-Bounds Access Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM Decoder. T...

Penguin Gaming PC client suffers from dll hijacking vulnerability (CNVD-2021-08537)

Penguin Gaming is the largest mobile gaming platform under Tencent. A dll hijacking vulnerability exists in the PC client of Penguin Gaming. An attacker can exploit this vulnerability to execute malicious code...

Shenzhen Tencent Computer Systems Limited Government WeChat suffers from dll hijacking vulnerability

Government WeChat is a smart office solution for the government provided by Tencent's Enterprise WeChat team on the basis of the original Enterprise WeChat. Shenzhen Tencent Computer Systems Limited Government WeChat has a dll hijacking vulnerability, which can be exploited by attackers to cause...

Shenzhen Tencent Computer System Co., Ltd. government weibo has dll hijacking vulnerability (CNVD-2021-09532)

Government WeChat is a smart office solution for the government provided by Tencent's Enterprise WeChat team on the basis of the original Enterprise WeChat. Shenzhen Tencent Computer Systems Limited Government WeChat has a dll hijacking vulnerability, which can be exploited by attackers to cause...

Shenzhen Tencent Computer System Co., Ltd.'s Government WeChat suffers from dll hijacking vulnerability (CNVD-2021-09531)

Government WeChat is a smart office solution for the government provided by Tencent's Enterprise WeChat team on the basis of the original Enterprise WeChat. Shenzhen Tencent Computer Systems Limited Government WeChat has a dll hijacking vulnerability, which can be exploited by attackers to cause...

TIM for Windows suffers from dll hijacking vulnerability

TIM is a multi-platform client application released in November 2016 by Tencent. It supports QQ and WeChat login, and is named "TIM". A dll hijacking vulnerability exists in TIM Windows Edition. An attacker can use this vulnerability to load a malicious dll and execute malicious code...

Penguin Gaming has a dll hijacking vulnerability

Penguin Gaming is Tencent's mobile gaming platform. It is located in the "connector" of the e-sports ecosystem, integrating the resources of Tencent.com, QQ Hand Games, and Tencent Mutual Entertainment team, and cooperating deeply with professional e-sports events such as QGC and TGA. Penguin...

Penguin Gaming has a dll hijacking vulnerability

Penguin Gaming is a mobile gaming platform under Tencent. It is located in the "connector" of the e-sports ecosystem, integrating the resources of Tencent.com, QQ Hand Games and Tencent Hublot, and cooperating in depth with professional e-sports events such as QGC and TGA. Penguin Gaming has a dl...