WeSing 安全漏洞

WeSing 全民K歌 is a singing program from the Chinese company WeSing 全民K歌. A security vulnerability exists in WeSing iOS version v9.3.39, which originates from an attacker who can obtain sensitive user information by providing a carefully crafted link...

CVE-2024-56957

An issue in Kingsoft Office Software Corporation Limited WPS Office iOS 12.20.0 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-56955

The CVE-2024-56955 entry concerns Tencent QQMail for iOS 6.6.4, where a crafted link can lead to exposure of sensitive user information. Affected component: QQMail iOS app; root cause and exact flaw are not detailed beyond this access risk in the provided documents. Attack scenario implies user i...

CVE-2024-56947

An issue in Xiamen Meitu Technology Co., Ltd. BeautyCam iOS v12.3.60 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-56962

An issue in Tencent Technology Shanghai Co., Ltd WeSing iOS v9.3.39 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-56957

An issue in Kingsoft Office Software Corporation Limited WPS Office iOS 12.20.0 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-56964

An issue in Che Hao Duo Used Automobile Agency Beijing Co., Ltd Guazi Used Car iOS 10.15.1 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-56953

An issue in Baidu China Co Ltd Baidu Input Method iOS version v12.6.13 allows attackers to access user information via supplying a crafted link...

CVE-2024-56971

The CVE-2024-56971 entry concerns Shuqi Novel iOS (version 5.3.8) from Zhiyuan Yuedu (Guangzhou) Literature Information Technology Co. Affected component/behavior: the iOS app is vulnerable to an issue where attackers can access sensitive user information by supplying a crafted link. The connecte...

CVE-2024-56959

An issue in Mashang Consumer Finance Co., Ltd Anyihua iOS 3.6.2 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-56951

An issue in Hangzhou Bobo Technology Co Ltd UU Game Booster iOS 10.6.13 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-56951

CVE-2024-56951 affects Hangzhou Bobo Technology Co Ltd UU Game Booster for iOS, version 10.6.13. The issue allows an attacker to access sensitive user information by supplying a crafted link. The connected sources confirm the affected version and the basic abuse vector but do not provide detailed...

CVE-2024-56968

CVE-2024-56968 concerns the iOS app Govee Home from Shenzhen Intellirocks Tech Co. Ltd, specifically version 6.5.01 . The vulnerability description across multiple sources states that an attacker can access sensitive user information by supplying a crafted payload. The connected PT-2025-3369 entr...

CVE-2024-56971

An issue in Zhiyuan Yuedu Guangzhou Literature Information Technology Co., Ltd Shuqi Novel iOS 5.3.8 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-56951

An issue in Hangzhou Bobo Technology Co Ltd UU Game Booster iOS 10.6.13 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-56947

CVE-2024-56947 affects BeautyCam on iOS (v12.3.60). A crafted link can cause exposure of sensitive user information. Some connected sources (PT-2025-3351) suggest updating BeautyCam iOS to a newer version as a fix and, as a workaround, avoiding links from untrusted sources until a patch is availa...

CVE-2024-56963

An issue in Beijing Sogou Technology Development Co., Ltd Sogou Input iOS 12.2.0 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2025-24085

A use after free issue was addressed with improved memory management. This issue is fixed in visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been...

CVE-2024-56952

An issue in Beijing Baidu Netcom Science & Technology Co Ltd Baidu Lite app iOS version 6.40.0 allows attackers to access user information via supplying a crafted link...

CVE-2024-56967

CVE-2024-56967 affects PolyBuzz iOS 2.0.20 from Cloud Whale Interactive Technology LLC. The connected sources indicate that an attacker can access sensitive user information by providing a crafted link. The exact root cause and affected components are not detailed beyond the version, and no expli...