670 matches found
CVE-2022-45564
SQL Injection vulnerability in znfit Home improvement ERP management system V5020220207,v42 allows attackers to execute arbitrary sql commands via the userCode parameter to the wechat applet...
CVE-2022-45564
SQL Injection vulnerability in znfit Home improvement ERP management system V5020220207,v42 allows attackers to execute arbitrary sql commands via the userCode parameter to the wechat applet...
znfit Home Improvement ERP Management System SQL Injection Vulnerability
znfit Home improvement ERP management system is a home ERP management system from znfit Shanghai, China. A security vulnerability exists in znfit Home improvement ERP management system version V5020220207, v42. An attacker exploited the vulnerability to execute arbitrary sql commands via the...
Experts Warn of RambleOn Android Malware Targeting South Korean Journalists
Suspected North Korean nation-state actors targeted a journalist in South Korea with a malware-laced Android app as part of a social engineering campaign. The findings come from South Korea-based non-profit Interlab, which coined the new malware RambleOn. The malicious functionalities include the...
Experts Warn of RambleOn Android Malware Targeting South Korean Journalists
Suspected North Korean nation-state actors targeted a journalist in South Korea with a malware-laced Android app as part of a social engineering campaign. The findings come from South Korea-based non-profit Interlab, which coined the new malware RambleOn. The malicious functionalities include the...
cn.bjdd301:core-mvc (1.0.0), org.thlws:payment-bestpay (1.0.1) +1 more potentially affected by CVE-2023-24162 via cn.hutool:hutool-all (4.0.1)
cn.hutool:hutool-all MAVEN version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-all and may be impacted: - cn.bjdd301:core-mvc 1.0.0 - org.thlws:payment-bestpay 1.0.1 - org.thlws:payment-wechat 1.0.3 Source cves: CVE-2023-2416...
cn.bjdd301:core-mvc (1.0.0), org.thlws:payment-bestpay (1.0.1) +1 more potentially affected by CVE-2023-24163 via cn.hutool:hutool-all (4.0.1)
cn.hutool:hutool-all MAVEN version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-all and may be impacted: - cn.bjdd301:core-mvc 1.0.0 - org.thlws:payment-bestpay 1.0.1 - org.thlws:payment-wechat 1.0.3 Source cves: CVE-2023-2416...
com.github.guochaojava:winter-wechat (>=0.0.1, <=0.0.3), com.icexxx:icewx (1.0.3) potentially affected by CVE-2023-24163 via cn.hutool:hutool-all (4.0.7)
cn.hutool:hutool-all MAVEN version 4.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-all and may be impacted: - com.github.guochaojava:winter-wechat =0.0.1, =0.0.3 - com.icexxx:icewx 1.0.3 Source cves: CVE-2023-24163 Source advisor...
com.github.guochaojava:winter-wechat (>=0.0.1, <=0.0.3), com.icexxx:icewx (1.0.3) potentially affected by CVE-2023-24162 via cn.hutool:hutool-all (4.0.7)
cn.hutool:hutool-all MAVEN version 4.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-all and may be impacted: - com.github.guochaojava:winter-wechat =0.0.1, =0.0.3 - com.icexxx:icewx 1.0.3 Source cves: CVE-2023-24162 Source advisor...
CVE-2022-3858: Undefined Security Weakness
The Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line, WeChat, Email, SMS, Call Button WordPress plugin before 3.0.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as admin...
XCSSET Malware Updates with Python 3 to Target macOS Monterey Users
The operators of the XCSSET macOS malware have upped the stakes by making iterative improvements that add support for macOS Monterey by upgrading its source code components to Python 3. "The malware authors have changed from hiding the primary executable in a fake Xcode.app in the initial version...
(0Day) Tencent WeChat WXAM Decoder Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM...
Xiaomi Phone Bug Allowed Payment Forgery
Smartphone maker Xiaomi, the world’s number three phone maker behind Apple and Samsung, reported it has patched a high-severity flaw in its “trusted environment” used to store payment data that opened some of its handsets to attack. Researchers at Check Point Research revealed last week in a repo...
CVE-2021-40180
In the WeChat application 8.0.10 for Android and iOS, a mini program can obtain sensitive information from a user's address book via wx.searchContacts...
CVE-2021-40180
In the WeChat application 8.0.10 for Android and iOS, a mini program can obtain sensitive information from a user's address book via wx.searchContacts...
CVE-2021-40180
In the WeChat application 8.0.10 for Android and iOS, a mini program can obtain sensitive information from a user's address book via wx.searchContacts...
Design/Logic Flaw
In the WeChat application 8.0.10 for Android and iOS, a mini program can obtain sensitive information from a user's address book via wx.searchContacts...
CVE-2021-40180
In the WeChat application 8.0.10 for Android and iOS, a mini program can obtain sensitive information from a user's address book via wx.searchContacts...
CVE-2021-40180
According to connected documents, CVE-2021-40180 affects WeChat app version 8.0.10 for Android and iOS, where a mini program can invoke wx.searchContacts to access the user's address book and obtain sensitive information. The root cause is a permissions/API misuse in the mini program environment ...
PT-2022-11201 · Tencent · Wechat
Name of the Vulnerable Software and Affected Versions: WeChat versions 8.0.10 Description: A mini program in the WeChat application can obtain sensitive information from a user's address book via wx.searchContacts. This issue allows unauthorized access to user data. Recommendations: For WeChat...