521 matches found
CVE-2021-40180
According to connected documents, CVE-2021-40180 affects WeChat app version 8.0.10 for Android and iOS, where a mini program can invoke wx.searchContacts to access the user's address book and obtain sensitive information. The root cause is a permissions/API misuse in the mini program environment ...
PT-2022-11201 · Tencent · Wechat
Name of the Vulnerable Software and Affected Versions: WeChat versions 8.0.10 Description: A mini program in the WeChat application can obtain sensitive information from a user's address book via wx.searchContacts. This issue allows unauthorized access to user data. Recommendations: For WeChat...
Tencent WeChat 信息泄露漏洞
Tencent WeChat 微信 is an online social networking application from the Chinese company Tencent. The program supports sending voice messages, videos, images, and text, among others. A security vulnerability exists in Tencent WeChat version 8.0.10, which stems from an applet that can obtain sensitiv...
Tencent WeChat WXAM Decoder Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM decoder. T...
Tencent WeChat WXAM Decoder Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM...
Malicious code in wechat-internal (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bdbec2dd8690cb93d6d50b709cb398ad94ee2b74ddaac42cc93a933bd041c9fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-7110 Malicious code in wechat-internal (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bdbec2dd8690cb93d6d50b709cb398ad94ee2b74ddaac42cc93a933bd041c9fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in wechat-service (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 450f4876c8a2bc471ce361f2312e7e83d8e576d55cdbbd10d910b0356b6ae233 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-7109 Malicious code in wechat-base (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware efd434b2a8213da1c5ca378be682695bb852927e8922e808a2efb0e76df157dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in wechat-base (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware efd434b2a8213da1c5ca378be682695bb852927e8922e808a2efb0e76df157dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-7113 Malicious code in wechat-service (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 450f4876c8a2bc471ce361f2312e7e83d8e576d55cdbbd10d910b0356b6ae233 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in wechat-user (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed674eef3c547c5b88c4d1f78f844e5bc4653a001ad23538ade6652afb5feb0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-7114 Malicious code in wechat-user (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed674eef3c547c5b88c4d1f78f844e5bc4653a001ad23538ade6652afb5feb0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-7115 Malicious code in wechat-web-login (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b586c23c600833d8a48686acbfa907bb25a5721bdf793c96da22190c15cd83be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in wechat-web-login (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b586c23c600833d8a48686acbfa907bb25a5721bdf793c96da22190c15cd83be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in wechat-mobile (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d33ded9daa26b1d3dac127b3e5efc1765043c402e1fd200c666be59bf9fcb48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in wechat-rn (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e869f3410b7769bc139296cbdc4a1f7b42e50157e39cbddb01328611883ca7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-7112 Malicious code in wechat-rn (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e869f3410b7769bc139296cbdc4a1f7b42e50157e39cbddb01328611883ca7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-7111 Malicious code in wechat-mobile (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d33ded9daa26b1d3dac127b3e5efc1765043c402e1fd200c666be59bf9fcb48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
