Cross-site Scripting (XSS) - Stored in zoujingli/thinkadmin

Description Stored XSS Content allows for the arbitrary execution of JavaScript Proof of Concept In Wechat management at feature - Reply rule management - Follow reply configuration - Default reply configuration - Follow automatic replies Save Reply text with payload : \x3csVg/\x3e XSS will trigg...

Guangdong Agricultural Credit WeChat public number has a logic flaw vulnerability

Guangdong Agricultural Credit WeChat Public Number is the official WeChat public number of Guangdong Rural Credit Union Federation, which mainly publicizes the financial services and reform and development achievements of the provincial federation and the province's agricultural commercial banks...

XSS Vulnerability in WeChat Public Number Backend System

WeChat public number belongs to Tencent, is the developer or business in the WeChat public platform application account, the account and QQ account interoperability, the platform to achieve and specific groups of text, pictures, voice, video, a full range of communication, interaction , the...

Jeecms background exists arbitrary file download vulnerability

jeecms is a content management system developed by Jiangxi Jinlei Technology Development Co., Ltd. that supports WeChat applets, WeChat public/service numbers, column models, content model cross-customization, and content e-commerce with payment and financial settlement. jeecms background exists...

SQL Injection Vulnerability in Wechat Ordering System of Huitong Network

Shenzhen Huitong Network is a solution provider. Huitong Network WeChat Ordering System has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Command execution vulnerability in WeChat for Windows (CNVD-2021-55353)

WeChat for windows is a cross-platform communication tool. A command execution vulnerability exists in WeChat for Windows, which can be exploited by an attacker to gain control of the server...

File Upload Vulnerability in Collaborative Office Platform of Microsoft Technology (Hangzhou) Co.

Microsoft Technology Hangzhou Co., Ltd. is a professional ECM Collaboration Management Software and BPM Business Process Management Software R & D and solution provider. A file upload vulnerability exists in the Collaboration Office platform of Microhome Software Technology Hangzhou Co., Ltd, whi...

Logic Flaw Vulnerability in WeChat webaudio Component

WeChat a cross-platform communication tool. A logic flaw vulnerability exists in the WeChat webaudio component that can be exploited by an attacker to cause a denial of service...

Hebei OuRun TianTeng YunMengBar Network Studio YMBCMS Command Execution Vulnerability

YMBCMS is one of the self-developed products under Hebei OuRun TianTeng YunMengBar Network Studio.YMBCMS integrates computer station, cell phone station, WeChat public platform, small program, APP in one, sharing space, data synchronization and so on. Hebei OuRunTianTeng YunMengBar Network Studio...

WeChat Phonebook suffers from Janus Android signature vulnerability

WeChat Phonebook is an intelligent communication enhancement software created by Tencent. WeChat Phonebook suffers from a Janus Android signature vulnerability. Attackers can use the vulnerability to obtain system root privileges...

WeChat suffers from Janus Android signature vulnerability

WeChat is a cell phone communication software. WeChat has a Janus Android signature vulnerability that can be exploited by an attacker to gain root access to the system...

YouDianCMS suffers from SQL injection vulnerability (CNVD-2021-46899)

YouDianCMS set computer website, mobile website, micro letter, APP, small program in one, share space, data automatic synchronization, is the domestic open source five station one excellent solution. YouDianCMS has SQL injection vulnerability. Attackers can use the vulnerability to obtain sensiti...

SQL Injection Vulnerability in Website Construction System of Guangzhou Daxun Yunshang Network Technology Co.

Guangzhou Daxun Yunshang Network Technology Co., Ltd. is a company mainly engaged in enterprises and institutions of Internet application services, website construction, mobile station, micro letter platform depth development, SEO website optimization and promotion of business. Guangzhou Daxun...

SQL Injection Vulnerability in Ricochet Cloud's WeChat Live Code Management System

RikerCloud live code management system is an open source, free, live code system that can be operated online to improve efficiency, get more resources and so on. A SQL injection vulnerability exists in the RikCloud WeChat Live Code Management System. An attacker can exploit this vulnerability to...

Remote code execution vulnerability in WeChat windows version

WeChat for windows is a cross-platform communication tool. A remote code execution vulnerability exists in WeChat for windows, which can be exploited by attackers to execute malicious code...

Ricochet Cloud WeChat Live Code Management System Has a Universal Password Vulnerability

Rikkun shares cracked software, free activities, limited time activities, traffic, toll activities, cracking technology, development technology, source code, integrated Internet resources, learning resources, film and television resources, music resources, picture resources, and Android, iOS...

CVE-2021-27247

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tencent WeChat 2.9.5 desktop version. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

CVE-2021-27247

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tencent WeChat 2.9.5 desktop version. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tencent WeChat 2.9.5 desktop version. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

CVE-2021-27247

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tencent WeChat 2.9.5 desktop version. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...