Tencent microblogging XSS attack vulnerability-vulnerability warning-the black bar safety net

from: author:Kingthy's I believe we all know Sina Weibo in 6 on 2 8 may occurXSSattack event? That night, a large number of Sina Weibo users to automatically send tweets and automatically focus on one called“hellosamy“of the user. What exactlyXSSattacks why can have so much power for? Now many...

Android 'Tencent QQPhoto'权限许可和访问控制漏洞

CVE-2011-4867 Android是Google通过Open Handset Alliance发起的项目，用于为移动设备提供完整的软件集，包括操作系统、中间件等。 Android的Tencent QQPhoto com.tencent.qqphoto应用程序0.97版本中存在漏洞，该漏洞源于未正确保护数据。远程攻击者可利用此漏洞借助特制应用程序读取或修改联系人列表和密码哈希值。 0 0.97 the latest version in 29 Dec 2011 目前厂商还没有提供此漏洞的相关补丁或者升级程序 建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

腾讯微博 for Android 权限许可和访问控制漏洞

CVE-2011-4865 Android是Google通过Open Handset Alliance发起的项目，用于为移动设备提供完整的软件集，包括操作系统、中间件等。 Android的Tencent WBlog com.tencent.WBlog3.3.1版本和MicroBlogPad1.4.0版本应用程序中存在漏洞，该漏洞源于未正确保护数据。远程攻击者可利用此漏洞借助特制应用程序读取或修改短消息草稿箱和搜索关键词。 0 WBlog 3.3.1 MicroBlogPad 1.4.0 目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接：...

Tencent(腾讯)手机QQ for Android 权限许可和访问控制漏洞

CVE-2011-4864 Android是Google通过Open Handset Alliance发起的项目，用于为移动设备提供完整的软件集，包括操作系统、中间件等。 Android的Tencent MobileQQ com.tencent.mobileqq应用程序2.2版本中存在漏洞，该漏洞源于未正确保护数据。远程攻击者可利用此漏洞借助特制应用程序读取或修改短信息和好友列表。 0 Tencent腾讯手机QQ for Android 2.2 目前厂商已经发布了升级补丁以修复此安全问题 补丁获取链接： http://mobile.qq.com...

Tencent(腾讯)QQ手机管家 for Android 权限许可和访问控制漏洞

CVE-2011-4863 Android是Google通过Open Handset Alliance发起的项目，用于为移动设备提供完整的软件集，包括操作系统、中间件等。 Android的Tencent QQPimSecure com.tencent.qqpimsecure应用程序3.0.2版本中存在漏洞，该漏洞源于未正确保护数据。远程攻击者可利用此漏洞借助特制应用程序读取或修改SMS/MMS消息和联系人列表。 0 QQ手机管家 3.0.2 目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接： http://msm.qq.com/...

CVE-2011-4864

The Tencent MobileQQ com.tencent.mobileqq application 2.2 for Android does not properly protect data, which allows remote attackers to read or modify messages and a friends list via a crafted application...

CVE-2011-4863

The Tencent QQPimSecure com.tencent.qqpimsecure application 3.0.2 for Android does not properly protect data, which allows remote attackers to read or modify SMS/MMS messages and a contact list via a crafted application...

CVE-2011-4865

The Tencent WBlog com.tencent.WBlog 3.3.1 and MicroBlogPad 1.4.0 applications for Android do not properly protect data, which allows remote attackers to read or modify message drafts and search keywords via a crafted application...

Design/Logic Flaw

The Tencent QQPimSecure com.tencent.qqpimsecure application 3.0.2 for Android does not properly protect data, which allows remote attackers to read or modify SMS/MMS messages and a contact list via a crafted application...

Code injection

The Tencent WBlog com.tencent.WBlog 3.3.1 and MicroBlogPad 1.4.0 applications for Android do not properly protect data, which allows remote attackers to read or modify message drafts and search keywords via a crafted application...

Information disclosure

The Tencent QQPhoto com.tencent.qqphoto application 0.97 for Android does not properly protect data, which allows remote attackers to read or modify contact information and a password hash via a crafted application...

Design/Logic Flaw

The Tencent MobileQQ com.tencent.mobileqq application 2.2 for Android does not properly protect data, which allows remote attackers to read or modify messages and a friends list via a crafted application...

CVE-2011-4863

The Tencent QQPimSecure com.tencent.qqpimsecure application 3.0.2 for Android does not properly protect data, which allows remote attackers to read or modify SMS/MMS messages and a contact list via a crafted application...

CVE-2011-4864

The Tencent MobileQQ com.tencent.mobileqq application 2.2 for Android does not properly protect data, which allows remote attackers to read or modify messages and a friends list via a crafted application...

CVE-2011-4865

The Tencent WBlog com.tencent.WBlog 3.3.1 and MicroBlogPad 1.4.0 applications for Android do not properly protect data, which allows remote attackers to read or modify message drafts and search keywords via a crafted application...

CVE-2011-4867

The Tencent QQPhoto com.tencent.qqphoto application 0.97 for Android does not properly protect data, which allows remote attackers to read or modify contact information and a password hash via a crafted application...

CVE-2011-4863

The CVE concerns Tencent QQPimSecure (com.tencent.qqpimsecure) on Android, version 3.0.2. The flaw is a data protection weakness that allows remote attackers to read or modify SMS/MMS messages and the contact list via a crafted application. The vulnerability is described without exploit specifics...

CVE-2011-4864

Technical details about CVE-2011-4864 (affected product, root cause, impact, or exploit info) are not provided in the supplied documents. Monitor for updates from vendors and security advisories.

CVE-2011-4865

The CVE-2011-4865 issue affects Android apps Tencent WBlog 3.3.1 and MicroBlogPad 1.4.0, where data is not protected properly, allowing remote attackers to read or modify message drafts and search keywords via a crafted app. Root cause: insecure data protection within these apps. Impact is data e...

CVE-2011-4867

The CVE-2011-4867 entry applies to the Android Tencent QQPhoto (com.tencent.qqphoto) app, version 0.97. The vulnerability is described as an improper data protection flaw that allows remote attackers to read or modify contact information and a password hash through a crafted application. The prov...