Lucene search
+L

536 matches found

OSV
OSV
added 2022/06/20 8:12 p.m.9 views

MAL-2022-7110 Malicious code in wechat-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bdbec2dd8690cb93d6d50b709cb398ad94ee2b74ddaac42cc93a933bd041c9fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:12 p.m.5 views

Malicious code in wechat-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 450f4876c8a2bc471ce361f2312e7e83d8e576d55cdbbd10d910b0356b6ae233 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:12 p.m.13 views

MAL-2022-7109 Malicious code in wechat-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware efd434b2a8213da1c5ca378be682695bb852927e8922e808a2efb0e76df157dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:12 p.m.7 views

Malicious code in wechat-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware efd434b2a8213da1c5ca378be682695bb852927e8922e808a2efb0e76df157dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:12 p.m.10 views

MAL-2022-7113 Malicious code in wechat-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 450f4876c8a2bc471ce361f2312e7e83d8e576d55cdbbd10d910b0356b6ae233 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:12 p.m.8 views

Malicious code in wechat-user (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed674eef3c547c5b88c4d1f78f844e5bc4653a001ad23538ade6652afb5feb0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:12 p.m.8 views

MAL-2022-7114 Malicious code in wechat-user (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed674eef3c547c5b88c4d1f78f844e5bc4653a001ad23538ade6652afb5feb0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:12 p.m.7 views

MAL-2022-7115 Malicious code in wechat-web-login (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b586c23c600833d8a48686acbfa907bb25a5721bdf793c96da22190c15cd83be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:12 p.m.3 views

Malicious code in wechat-web-login (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b586c23c600833d8a48686acbfa907bb25a5721bdf793c96da22190c15cd83be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:12 p.m.4 views

Malicious code in wechat-mobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d33ded9daa26b1d3dac127b3e5efc1765043c402e1fd200c666be59bf9fcb48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:12 p.m.7 views

Malicious code in wechat-rn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e869f3410b7769bc139296cbdc4a1f7b42e50157e39cbddb01328611883ca7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:12 p.m.9 views

MAL-2022-7112 Malicious code in wechat-rn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e869f3410b7769bc139296cbdc4a1f7b42e50157e39cbddb01328611883ca7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:12 p.m.8 views

MAL-2022-7111 Malicious code in wechat-mobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d33ded9daa26b1d3dac127b3e5efc1765043c402e1fd200c666be59bf9fcb48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2022/05/14 3:00 a.m.32 views

WeChat Pay Java SDK allows XXE

WXPayUtil in WeChat Pay Java SDK allows XXE attacks involving a merchant notification URL...

7.5CVSS6.8AI score0.01903EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2022/05/14 3:00 a.m.82 views

GHSA-GQGV-2GP3-QQP3 WeChat Pay Java SDK allows XXE

WXPayUtil in WeChat Pay Java SDK allows XXE attacks involving a merchant notification URL...

7.5CVSS7.6AI score0.01903EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/03/20 12:00 a.m.9 views

赞赞网络科技 EyouCms 代码问题漏洞

Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A security vulnerability exists in EyouCms V1.5.4-UTF8-SP3, which originates from the wechatreturn function in /controller/Index.php that passes the...

7.2CVSS7.1AI score0.01071EPSS
SaveExploits1References2
OSV
OSV
added 2022/01/07 12:00 a.m.89 views

GHSA-RWQQ-P4P9-5WPQ Wechat-php-sdk is affected by a Cross Site Scripting vulnerability.

Wechat-php-sdk v1.10.2 is affected by a Cross Site Scripting XSS vulnerability in Wechat.php...

6.1CVSS5.9AI score0.00775EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
added 2022/01/07 12:00 a.m.36 views

Wechat-php-sdk is affected by a Cross Site Scripting vulnerability.

Wechat-php-sdk v1.10.2 is affected by a Cross Site Scripting XSS vulnerability in Wechat.php...

6.1CVSS1.8AI score0.00775EPSS
SaveExploits1References4Affected Software1
NVD
NVD
added 2021/12/17 1:15 p.m.26 views

CVE-2021-43678

Wechat-php-sdk v1.10.2 is affected by a Cross Site Scripting XSS vulnerability in Wechat.php...

6.1CVSS0.00775EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2021/12/17 1:15 p.m.5 views

CVE-2021-43678

Wechat-php-sdk v1.10.2 is affected by a Cross Site Scripting XSS vulnerability in Wechat.php...

6.1CVSS6.4AI score0.00775EPSS
SaveExploits1References3
Rows per page
Query Builder