16 matches found
CVE-2026-51990
An issue in Sogou Sogou Input Method 16.3.0.3498 fixed in 16.3.0.3498 allows a remote attacker to execute arbitrary code via the bizhelper.exe component...
EUVD-2026-80932
An issue in Sogou Sogou Input Method 16.3.0.3498 fixed in 16.3.0.3498 allows a remote attacker to execute arbitrary code via the bizhelper.exe component...
CVE-2026-51990
CVE-2026-51990 is a one-click remote code execution vulnerability in Sogou Input Method for Windows (developed by Tencent), fixed in version 16.3.0.3498 . The attack chain combines three weaknesses: unchecked command-line argument injection in the sgbiz URI handler (biz_helper.exe ), unrestricted...
CVE-2026-51990
An issue in Sogou Sogou Input Method 16.3.0.3498 fixed in 16.3.0.3498 allows a remote attacker to execute arbitrary code via the bizhelper.exe component...
CVE-2026-51990
An issue in Sogou Sogou Input Method 16.3.0.3498 fixed in 16.3.0.3498 allows a remote attacker to execute arbitrary code via the bizhelper.exe component...
PT-2026-89805
Китайские хакеры UNC3569 используют критическую уязвимость CVE-2026-51990 в Sogou для Windows от Tencent для развертывания бэкдора GrayRabbit с помощью специально созданной ссылки. Активную эксплуатацию заметили исследователи Gen Digital, предупредившие, что проблема заключается в уязвимости,...
VulnCheck KEV: CVE-2026-51990
Sogou Input Method contains a chain of three weaknesses that, if successfully exploited, could allow remote code execution. An attacker could exploit this vulnerability by convincing a user to click a specially crafted link...
Sogou Input Method suffers from a local power lifting vulnerability
Sogou Input Method is a Chinese character input method tool. A local privilege elevation vulnerability exists in Sogou Input Method. An attacker can exploit the vulnerability to cause a local privilege boost via a symbolic link...
Sogou Input Method (Windows client) suffers from dll hijacking vulnerability
Sogou Input Method is a Chinese character input method tool launched in June 2006 by Sogou Sogou. A dll hijacking vulnerability exists in Sogou Input Method Windows client. An attacker can exploit this vulnerability to load a malicious dll and execute malicious code...
Sogou Input Method of Beijing Sogou Information Service Co.
Sogou Input Method is a Chinese character input method tool launched in June 2006 by Sogou Sogou. Sogou Input Method has a dll hijacking vulnerability, which can be exploited by attackers to remotely control a user's computer or implant a Trojan horse...
Sogou Input Method Exe Hijacking Vulnerability
Sogou Input Method is a Chinese character input method tool. Sogou Input Method suffers from an exe hijacking vulnerability, which can be exploited by attackers to run malicious files during update checks...
Sogou mobile phone input method sites exist SQL injection vulnerability-vulnerability warning-the black bar safety net
Vulnerability type: SQL injection vulnerability Hazard rating: low The self-assessment Rank of: 5 Vulnerability status: the vendor has confirmed Brief description: Browse sogou input method web site, found that the presence ofSQL injectionvulnerabilities. Detailed description: 1...
Sogou input method 0DAY-vulnerability warning-the black bar safety net
Vulnerability process description: When windows is loaded sogou input method later, log in to the system, lock the computercltr+alt+del it. Switch to sogou input method, input the phonetic alphabet appears sogou input method toolbar, click on search, it will call iexplorer.exe the. Next you can b...
0day sogou input method loopholes to gain system permissions-bug warning-the black bar safety net
Unintentionally found a very serious vulnerability, and the year 3 3 8 9 input loophole similar. However, temporary does not affect the not system is not loaded sogou input method, not login system. If the remote server installed sogou, the login system is loaded after the search dogs, but not...
0day vulnerability Sogou input method to obtain system privileges
0day vulnerability Sogou input method to obtain system privileges Vulnerability: Do not intend to found a very serious vulnerability, and the year 3389 input loophole similar.However, no system was not being loaded does not affect input method logged in system. If the remote server installed ,...
搜狗输入法绕过锁屏保护漏洞
搜狗输入法是在中国广泛使用的拼音输入法。 当用户登录到Windows系统并加载了搜狗输入法后,锁屏(cltr+alt+del)再切换到该输入法,在输入法的工具栏中输入任意内容后点击“搜索”就会调用iexplorer.exe。如果登录账号属于管理员组,就可以直接在IE地址栏中进入system32目录并运行cmd。 SOGOU.COM 搜狗输入法 4.3 - Microsoft Windows 7 ultimate 厂商补丁: SOGOU.COM --------- 目前厂商还没有提供补丁或者升级程序,我们建议使用此软件的用户随时关注厂商的主页以获取最新版本:...