Microdistribution has a flawed logic vulnerability

Micro Distribution is a WeChat distribution platform tailored for businesses. Micro distribution has a logic flaw vulnerability, an attacker can use the vulnerability to overstep the right to modify the entire network of users' shipping address information...

SQL Injection Vulnerability in Guangzhou Sanjin Network Technology Co.

Guangzhou Sanjin Network Technology Co., Ltd. company is a high-tech technology enterprises in Guangdong Province was founded in May 2014, is the enterprise WeChat distribution platform, website construction service providers. Guangzhou Sanjin Network Technology Co., Ltd. website building system...

File Upload Vulnerability in LaiKe Full Scene E-commerce System

LaiKe full-scene e-commerce system is a WeChat applet e-commerce platform front and back end open source PHP , including distribution , group , lottery , red packets , nine-grid game and other functions , the entire system architecture is very simple , suitable for small teams or individual...

File Upload Vulnerability in LaiKe Full Scene Ecommerce System

LaiKe full-scene e-commerce system is a WeChat small program e-commerce platform front and back end open source PHP, including distribution, group, lottery, red packets and other functions , the entire system architecture is very simple , suitable for small teams or individual developers secondar...

SQL Injection Vulnerability in Micro Edge Live of Shenzhen Micro Edge Information Technology Co.

Shenzhen Micro Edge Information Technology Co., Ltd. is a WeChat third-party service for regional self-publishers, and has released six categories of products: dating, matchmaking, live broadcasting, recruitment, real estate, and carpooling. A SQL injection vulnerability exists in Shenzhen Micro...

WeChat - Memory Corruption in CAudioJBM::InputAudioFrameToJBM Exploit

There is a memory corruption vulnerability in audio processing during a voice call in WeChat. When an RTP packet is processed, there is a call to UnpacketRTP. This function decrements the length of the packet by 12 without checking that the packet has at least 12 bytes in it. This leads to a...

WeChat - Memory Corruption in CAudioJBM::InputAudioFrameToJBM

There is a memory corruption vulnerability in audio processing during a voice call in WeChat. When an RTP packet is processed, there is a call to UnpacketRTP. This function decrements the length of the packet by 12 without checking that the packet has at least 12 bytes in it. This leads to a...

WeChat - Memory Corruption in CAudioJBM::InputAudioFrameToJBM

WeChat - Memory Corruption in CAudioJBM::InputAudioFrameToJBM There is a memory corruption vulnerability in audio processing during a voice call in WeChat. When an RTP packet is processed, there is a call to UnpacketRTP. This function decrements the length of the packet by 12 without checking tha...

CVE-2019-17151

This vulnerability allows remote attackers redirect users to an external resource on affected installations of Tencent WeChat Prior to 7.0.9. User interaction is required to exploit this vulnerability in that the target must be within a chat session together with the attacker. The specific flaw...

Design/Logic Flaw

This vulnerability allows remote attackers redirect users to an external resource on affected installations of Tencent WeChat Prior to 7.0.9. User interaction is required to exploit this vulnerability in that the target must be within a chat session together with the attacker. The specific flaw...

CVE-2019-17151

This vulnerability allows remote attackers redirect users to an external resource on affected installations of Tencent WeChat Prior to 7.0.9. User interaction is required to exploit this vulnerability in that the target must be within a chat session together with the attacker. The specific flaw...

CVE-2019-17151

CVE-2019-17151 affects Tencent WeChat (before 7.0.9). The flaw is in parsing a user’s profile name, enabling unsafe redirection via the name field when the target is in a chat with the attacker. Exploitation requires user interaction within a chat session. The vulnerability is described as “name ...

XSS vulnerability in jeecms

jeecms is Jiangxi Jinlei Technology Development Co., Ltd. developed a support for WeChat small program, WeChat public number / service number, column model, content model cross-customization, as well as with payment and financial settlement of the content of the e-commerce as one of the content...

Tencent WeChat Command Injection Vulnerability

Tencent WeChat is an online social application from the Chinese company Tencent. The program supports sending voice messages, videos, pictures, and text, among other things. A command injection vulnerability exists in Tencent WeChat that stems from the program failing to properly validate a...

Tencent WeChat name Field Unsafe Redirection Vulnerability

This vulnerability allows remote attackers redirect users to an external resource on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must be within a chat session together with the attacker. The specific flaw exists within th...

DLL Hijacking Vulnerability in WeChat PC Client

WeChat is a chatting and socializing software from Shenzhen Tencent Computer System Co. A DLL hijacking vulnerability exists in the WeChat PC client, which can be exploited by attackers to execute malicious code...

iOS URL Scheme Could Let App-in-the-Middle Attackers Hijack Your Accounts

Security researchers have illustrated a new app-in-the-middle attack that could allow a malicious app installed on your iOS device to steal sensitive information from other apps by exploiting certain implementations of Custom URL Scheme. By default on Apple's iOS operating system, every app runs...

WeChat for Android 7.0.4 - vcodec2_hls_filter Denial of Service Exploit

Exploit Title: DoS Wechat with an emoji Exploit Author: Hong Nhat Pham Vendor Homepage: http://www.tencent.com/en-us/index.html Software Link: https://play.google.com/store/apps/details?id=com.tencent.mm Version: 7.0.4 Tested on: Android 9.0 CVE : CVE-2019-11419 Description: vcodec2hlsfilter in...

WeChat for Android 7.0.4 - vcodec2_hls_filter Denial of Service

WeChat for Android 7.0.4 - vcodec2hlsfilter Denial of Service Exploit Title: DoS Wechat with an emoji Date: 16-May-2019 Exploit Author: Hong Nhat Pham Vendor Homepage: http://www.tencent.com/en-us/index.html Software Link: https://play.google.com/store/apps/details?id=com.tencent.mm Version: 7.0....

WeChat for Android 7.0.4 - 'vcodec2_hls_filter' Denial of Service

Exploit Title: DoS Wechat with an emoji Date: 16-May-2019 Exploit Author: Hong Nhat Pham Vendor Homepage: http://www.tencent.com/en-us/index.html Software Link: https://play.google.com/store/apps/details?id=com.tencent.mm Version: 7.0.4 Tested on: Android 9.0 CVE : CVE-2019-11419 Description:...