QQ Mail hijacking account 0day Exploit

Using 0day exploit you can hijack any account and take possession of the correspondence...

QQ Browser suffers from xss vulnerability

QQ Browser is a new-generation browser launched by Tencent, with a new architecture and fully optimized for the IE kernel. An xss vulnerability exists in QQ Browser, which can be exploited by attackers to execute code...

WUZHI CMS Cross-Site Scripting Vulnerability (CNVD-2018-10861)

WUZHI CMS is China's five fingers WUZHI Internet technology company based on PHP and MySQL open source content management system CMS. A cross-site scripting vulnerability exists in 'Account Management-Member Center-Chinese Information-Ordinary Member' in WUZHI CMS version 4.1.0. A remote attacker...

CVE-2018-11549

An issue was discovered in WUZHI CMS 4.1.0 There is a Stored XSS Vulnerability in "Account Settings - Member Centre - Chinese information - Ordinary member" via a QQ number, as demonstrated by a formqq10= substring...

CVE-2018-11549

An issue was discovered in WUZHI CMS 4.1.0 There is a Stored XSS Vulnerability in "Account Settings - Member Centre - Chinese information - Ordinary member" via a QQ number, as demonstrated by a formqq10= substring...

Cross site scripting

An issue was discovered in WUZHI CMS 4.1.0 There is a Stored XSS Vulnerability in "Account Settings - Member Centre - Chinese information - Ordinary member" via a QQ number, as demonstrated by a formqq10= substring...

CVE-2018-11549

An issue was discovered in WUZHI CMS 4.1.0 There is a Stored XSS Vulnerability in "Account Settings - Member Centre - Chinese information - Ordinary member" via a QQ number, as demonstrated by a formqq10= substring...

PT-2018-10656 · Wuzhi · Wuzhi Cms

Name of the Vulnerable Software and Affected Versions: WUZHI CMS version 4.1.0 Description: A Stored XSS issue was found in the "Account Settings - Member Centre - Chinese information - Ordinary member" section, specifically via a QQ number. This can be exploited through a form submission, where...

Denial of Service Vulnerability in QQ Music for PC

QQ Music Player a player with great music recommendations. A denial of service vulnerability exists in QQ Music for PC v15.8.0, which can be exploited by attackers to cause the program to crash...

qq-new.ru Open Redirect vulnerability

Open Bug Bounty ID: OBB-401588 Description| Value ---|--- Affected Website:| qq-new.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

Memory corruption vulnerability exists in QQ Video (CNVD-2017-34292)

QQ Video is a local player from Tencent that supports movie and music files in any format. A memory corruption vulnerability exists in the MPCVideoDec module of QQ Video Player when parsing ogg files of a specific format, which can be exploited by attackers to cause a denial of service attack...

Memory corruption vulnerability exists in QQ Video (CNVD-2017-34291)

QQ Video is a local player from Tencent that supports movie and music files in any format. A memory corruption vulnerability exists in the libavcodec module of QQ Video Player when parsing certain format ogg files, which can be exploited by attackers to cause a denial of service attack...

Memory Corruption Vulnerability in QQ Video

QQ Video is a local player from Tencent that supports movie and music files in any format. A memory corruption vulnerability exists in QQ Video Player when parsing certain format webm files, which can be exploited by attackers to cause a denial of service attack...

Null Pointer Reference Vulnerability in QQ Video

QQ Video is a local player from Tencent that supports movie and music files in any format. A null pointer reference vulnerability exists in the QQ AV player when parsing MP4 files of a specific format, which can be exploited by an attacker to cause a denial of service...

Memory Corruption Vulnerability in QQVideo coreAVC Module

QQ Video is a local player from Tencent that supports movie and music files in any format. A memory corruption vulnerability exists in the coreAVC module of QQ Video Player when parsing MP4 files of certain formats, which can be exploited by attackers to cause a denial of service...

QQ轻聊版 - Customized SSL, Dangerous filesystem permissions, Runtime privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application QQ轻聊版 published at the 'play' market has multiple vulnerabilities...

PostMessage cross-domain vulnerability-vulnerability warning-the black bar safety net

Note: this article is“millet Security Center”original, reprint please contact the“millet Security Center” Background Value: $3000 Vulnerability cause: postMessage cross-domain vulnerabilities to cause, the use of the websocket receives a user authentication token Original address:...

USN-3143-1: c-ares vulnerability

Gzob Qq discovered that c-ares incorrectly handled certain hostnames. A remote attacker could use this issue to cause applications using c-ares to crash, resulting in a denial of service, or possibly execute arbitrary code...

On QQ browser and other applications“WormBrowser”vulnerability briefings-vulnerability warning-the black bar safety net

Recently, the national information security vulnerabilities library CNNVD received Pangu team on“WormBrowser”vulnerability of the relevant circumstances of the message sent, the vulnerability exists in the Android version of the QQ browser and QQ hot two applications. Due to the above products, a...

[SECURITY] [DSA 3682-1] c-ares security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3682-1 [email protected] https://www.debian.org/security/ Florian Weimer September 30, 2016 https://www.debian.org/security/faq -...