521 matches found
CVE-2021-27247
CVE-2021-27247 affects Tencent WeChat 2.9.5 desktop. The flaw is in the WXAM decoder where unvalidated user data allows an out-of-bounds read, exposing sensitive information. This may enable arbitrary code execution when combined with other vulnerabilities, with user interaction required (malicio...
CVE-2021-27247
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tencent WeChat 2.9.5 desktop version. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...
Tencent WeChat 缓冲区错误漏洞
Tencent WeChat 微信 is an online social networking application from the Chinese company Tencent. The program supports sending voice messages, videos, images, and text. A security vulnerability exists in Tencent WeChat 2.9.5 desktop version, which allows remote attackers to disclose sensitive...
SQL Injection Vulnerability in Enterprise Magic Box
Enterprise WeChat Magic Box is an Enterprise WeChat SCRM, Enterprise WeChat third-party platform source code system, through her you can quickly deploy your own enterprise WeChat management system, enterprise WeChat SCRM system, session archive source code system. Enterprise WeChat Magic Box has ...
Tencent WeChat WXAM Decoder Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM...
CVE-2020-27874
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat 7.0.18. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM...
CVE-2020-27874
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat 7.0.18. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM...
Design/Logic Flaw
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat 7.0.18. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM...
CVE-2020-27874
The CVE-2020-27874 entry concerns Tencent WeChat 7.0.18 with a vulnerability in the WXAM Decoder. The flaw results from improper validation of user-supplied data, causing memory access past the end of an allocated object and leading to remote code execution. Exploitation requires user interaction...
CVE-2020-27874
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat 7.0.18. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM...
Tencent WeChat Buffer Error Vulnerability
Tencent WeChat 微信 is an online social networking application from the Chinese company Tencent. The program supports sending voice messages, videos, images, and text. A buffer error vulnerability exists in Tencent WeChat that originates when a network system or product performs an operation in...
Bus Terminal WeChat Ticketing System Has Logic Flaw Vulnerability
Chengdu Jiuyuan Software Limited Liability Company was established on July 18, 2013 . Legal representative Chen Li, the company's business scope includes: software development; computer information technology development, technical consulting; web design; sales of electronic products and provide...
Arbitrary File Download Vulnerability in LinkWechat
LinkWeChat is an open source SCRM system based on enterprise WeChat. LinkWechat has an arbitrary file download vulnerability that can be exploited by an attacker to download arbitrary files under the system...
Tencent WeChat WXAM Decoder Out-Of-Bounds Access Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM Decoder. T...
Shenzhen Tencent Computer System Co., Ltd.'s Government WeChat suffers from dll hijacking vulnerability (CNVD-2021-09531)
Government WeChat is a smart office solution for the government provided by Tencent's Enterprise WeChat team on the basis of the original Enterprise WeChat. Shenzhen Tencent Computer Systems Limited Government WeChat has a dll hijacking vulnerability, which can be exploited by attackers to cause...
Shenzhen Tencent Computer System Co., Ltd. government weibo has dll hijacking vulnerability (CNVD-2021-09532)
Government WeChat is a smart office solution for the government provided by Tencent's Enterprise WeChat team on the basis of the original Enterprise WeChat. Shenzhen Tencent Computer Systems Limited Government WeChat has a dll hijacking vulnerability, which can be exploited by attackers to cause...
Shenzhen Tencent Computer Systems Limited Government WeChat suffers from dll hijacking vulnerability
Government WeChat is a smart office solution for the government provided by Tencent's Enterprise WeChat team on the basis of the original Enterprise WeChat. Shenzhen Tencent Computer Systems Limited Government WeChat has a dll hijacking vulnerability, which can be exploited by attackers to cause...
JIZHICMS Cross-Site Scripting Vulnerability (CNVD-2021-02998)
JIZHICMS Extreme CMS is an open source, free, commercial license-free website building system. A cross-site scripting vulnerability exists in Home/c/WechatController.php in JIZHICMS 1.7.1. An attacker can inject arbitrary Web script or HTML via index.php/Wechat/checkWeixin?signature=1&echostr=XSS...
WeChat program has unauthorized access vulnerability
WeChat is a cell phone communication software. An unauthorized access vulnerability exists in the WeChat program, which can be exploited by an attacker to obtain sensitive information...