907 matches found
Design/Logic Flaw
This vulnerability allows remote attackers redirect users to an external resource on affected installations of Tencent WeChat Prior to 7.0.9. User interaction is required to exploit this vulnerability in that the target must be within a chat session together with the attacker. The specific flaw...
CVE-2019-17151
This vulnerability allows remote attackers redirect users to an external resource on affected installations of Tencent WeChat Prior to 7.0.9. User interaction is required to exploit this vulnerability in that the target must be within a chat session together with the attacker. The specific flaw...
CVE-2019-17151
CVE-2019-17151 affects Tencent WeChat (before 7.0.9). The flaw is in parsing a user’s profile name, enabling unsafe redirection via the name field when the target is in a chat with the attacker. Exploitation requires user interaction within a chat session. The vulnerability is described as “name ...
CVE-2019-17151: Product UI does not Warn User of Unsafe Actions
This vulnerability allows remote attackers redirect users to an external resource on affected installations of Tencent WeChat Prior to 7.0.9. User interaction is required to exploit this vulnerability in that the target must be within a chat session together with the attacker. The specific flaw...
Pattern Live PC client suffers from dll hijacking vulnerability
Fancy Live is Tencent's live Internet interactive entertainment platform. Figure live PC version of the existence of dll hijacking vulnerability, attackers can use the vulnerability to execute arbitrary code...
Tencent WeChat Command Injection Vulnerability
Tencent WeChat is an online social application from the Chinese company Tencent. The program supports sending voice messages, videos, pictures, and text, among other things. A command injection vulnerability exists in Tencent WeChat that stems from the program failing to properly validate a...
PT-2019-14981
Name of the Vulnerable Software and Affected Versions Tencent WeChat versions prior to 7.0.9 Description This issue allows remote attackers to redirect users to an external resource on affected installations. User interaction is required, as the target must be within a chat session with the...
Tencent WeChat name Field Unsafe Redirection Vulnerability
This vulnerability allows remote attackers redirect users to an external resource on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must be within a chat session together with the attacker. The specific flaw exists within th...
Google Chrome Affected By Magellan 2.0 Flaws
Researchers have disclosed five recently-patched vulnerabilities in the Google Chrome browser that could be exploited by an attacker to remotely execute code. The vulnerabilities, dubbed Magellan 2.0 by the Tencent Blade team of researchers who discovered them, exist in the SQLite database...
Integer Overflow Vulnerability in QQ Browser
QQ Browser is a browser. An integer overflow vulnerability exists in QQ Browser. An attacker can exploit the vulnerability to cause the browser to crash and flashback...
Apple Shares Some Browsing History with Chinese Company
Apple is sending some browsing history of iOS 13 Safari users to Tencent Holdings Limited, a Chinese multinational conglomerate. The data shared is tied to the Safari Safe Browsing technology. Revelations of the relationship have drawn criticism from security and privacy experts. Apple’s Safari...
Apple Under Fire Over Sending Some Users Browsing Data to China's Tencent
Do you know Apple is sending iOS web browsing related data of some of its users to Chinese Internet company Tencent? I am sure many of you are not aware of this, neither was I, and believe me, none of us could expect this from a tech company that promotes itself as a champion of consumer privacy...
Apple Under Fire Over Sending Some Users Browsing Data to China's Tencent
Do you know Apple is sending iOS web browsing related data of some of its users to Chinese Internet company Tencent? I am sure many of you are not aware of this, neither was I, and believe me, none of us could expect this from a tech company that promotes itself as a champion of consumer privacy...
Tencent game platform Wegame has dll hijacking vulnerability
Tencent wegame platform is an upgraded version of Tencent Game Platform TGP. Tencent wegame platform provides users with the best quality game services, supports domestic games, and also cooperates with foreign game makers to provide, including information, purchase, download, assistant, live...
DEF CON 2019: Researchers Demo Hacking Google Home for RCE
LAS VEGAS – The Tencent Blade Team of researchers demonstrated several ways they have developed to hack and run remote code on Google Home smart speakers. The hacks center around what is known as a Magellan vulnerability, which can be used to exploit the massively popular SQLite database engine...
Millions of Android Smartphones Vulnerable to Trio of Qualcomm Bugs
UPDATE Security researchers from Tencent’s Blade Team are warning Android smartphone and tablet users of flaws in Qualcomm chipsets, called QualPwn. The bugs collectively allow hackers to compromise Android devices remotely simply by sending malicious packets over-the-air – no user interaction...
Tencent HaboHaboMalHunter Security Bypass Vulnerability
Tencent Habo is a malware sample analysis and identification platform from Tencent. HaboMalHunter is a malware analysis tool that relies on the Dynamic Analysis Module, Static Analysis Module, and Task Scheduling Framework in a deep sandbox to automate the analysis of malicious samples. A securit...
CVE-2019-13125
HaboMalHunter through 2.0.0.3 in Tencent Habo allows attackers to evade dynamic malware analysis via PIE compilation...