536 matches found
EUVD-2023-1022
Malicious code in bioql PyPI...
EUVD-2024-45094
Malicious code in bioql PyPI...
MAL-2025-47616 Malicious code in botframework-wechat (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in botframework-wechat (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2025-10943
A security flaw has been discovered in MikeCen WeChat-Face-Recognition up to 6e3f72bf8547d80b59e330f1137e4aa505f492c1. This vulnerability affects the function valid of the file wx.php. The manipulation of the argument echostr results in cross site scripting. The attack can be launched remotely...
CVE-2025-10943 MikeCen WeChat-Face-Recognition wx.php valid cross site scripting
A security flaw has been discovered in MikeCen WeChat-Face-Recognition up to 6e3f72bf8547d80b59e330f1137e4aa505f492c1. This vulnerability affects the function valid of the file wx.php. The manipulation of the argument echostr results in cross site scripting. The attack can be launched remotely...
CVE-2025-10943
The CVE-2025-10943 entry concerns MikeCen WeChat-Face-Recognition, affecting the wx.php file’s valid function. The vulnerability arises from manipulating the echostr argument, enabling cross-site scripting. Exploitation is described as remote, with nothing indicating versioned releases or a publi...
CVE-2025-10943 MikeCen WeChat-Face-Recognition wx.php valid cross site scripting
A security flaw has been discovered in MikeCen WeChat-Face-Recognition up to 6e3f72bf8547d80b59e330f1137e4aa505f492c1. This vulnerability affects the function valid of the file wx.php. The manipulation of the argument echostr results in cross site scripting. The attack can be launched remotely...
WeChat-Face-Recognition 代码注入漏洞
WeChat-Face-Recognition is a WeChat admin platform face recognition program by Mike Cen, an individual developer. WeChat-Face-Recognition suffers from a code injection vulnerability that stems from a misuse of the parameter echostr in the file wx.php, which could lead to a cross-site scripting...
PT-2025-39364
Name of the Vulnerable Software and Affected Versions MikeCen WeChat-Face-Recognition affected versions not specified Description A security flaw exists in MikeCen WeChat-Face-Recognition. The issue involves cross site scripting resulting from manipulation of the echostr argument within the valid...
Linux Distros Unpatched Vulnerability : CVE-2023-2617
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability classified as problematic was found in OpenCV wechatqrcode Module up to 4.7.0. Affected by this vulnerability is the function...
dts-mall 安全漏洞
dts-mall is a WeChat small program mall by qiguliuxing individual developer. A security vulnerability exists in dts-mall version v0.0.1-SNAPSHOT, which stems from improper access control and could lead to authentication bypass...
CVE-2025-50902
Cross Site Request Forgery CSRF vulnerability in old-peanut Open-Shop aka old-peanut/wechatappletopensource thru 1.0.0 allows attackers to gain sensitive information via crafted HTTP Post message...
PT-2025-34148 · Old Peanut · Open-Shop
Name of the Vulnerable Software and Affected Versions: old-peanut Open-Shop versions through 1.0.0 Description: A Cross Site Request Forgery CSRF issue exists in old-peanut Open-Shop, allowing attackers to obtain sensitive information via a crafted HTTP Post message. Recommendations: At the momen...
Linux Distros Unpatched Vulnerability : CVE-2023-2618
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability, which was classified as problematic, has been found in OpenCV wechatqrcode Module up to 4.7.0. Affected by this issue is the function...
jl-wechat-sdk (>=1.0.0, <=1.2.3) potentially affected by unknown CVE via crpyto-js (0.0.1-security)
crpyto-js NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on crpyto-js and may be impacted: - jl-wechat-sdk =1.0.0, =1.2.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17718...
CVE-2025-8764
A vulnerability classified as critical has been found in linlinjava litemall up to 1.8.0. Affected is the function Upload of the file /wx/storage/upload. The manipulation of the argument File leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclose...
wx-shop 安全漏洞
wx-shop is a WeChat applet simple mall by the individual developer Feng Zhihui 495300897. A security vulnerability exists in wx-shop, which stems from vulnerability to cross-site request forgery attacks...
CVE-2025-34045
A path traversal vulnerability exists in WeiPHP 5.0, an open source WeChat public account platform development framework by Shenzhen Yuanmengyun Technology Co., Ltd. The flaw occurs in the picUrl parameter of the /public/index.php/material/Material/downloadimgage endpoint, where insufficient inpu...