chatlog

Project Removal Notice Update Date: October 20, 2025 What Happened? Hello, thank you for following chatlog. I received a letter from WeChat's official team, which clearly indicates that the core functionality of the project poses compliance risks. In order to completely avoid legal issues and to...

CVE-2024-9106

CVE-2024-9106 Wechat Social login = 1.3.0 - Authentication Bypass Description: The Wechat Social login plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.3.0. This is due to insufficient verification on the user being supplied during the social login...

your-bot-my-inbox-cve-2026-68929-fastgpt-unauthenticated-wechat-channel-hijack

CVE-2026-68929 — PoC de Secuestro del Canal WeChat de FastGPT Toma de control no autenticada y entre inquilinos del canal de compartición WeChat iLink de FastGPT, basada únicamente en el shareId público...

CVE-2026-89260

MoguBlog through 6.2 contains an XML external entity injection vulnerability in the WeChat callback handler at POST /wechat/wechatCheck. The WechatRestApi.index method passes the raw request body to SignUtil.xmlToMap, which uses an unhardened dom4j SAXReader without DTD or external-entity...

EUVD-2026-76133

MoguBlog through 6.2 contains an XML external entity injection vulnerability in the WeChat callback handler at POST /wechat/wechatCheck. The WechatRestApi.index method passes the raw request body to SignUtil.xmlToMap, which uses an unhardened dom4j SAXReader without DTD or external-entity...

CVE-2026-89260 MoguBlog through 6.2 XML External Entity Injection in the Unauthenticated WeChat Callback Endpoint

MoguBlog through 6.2 contains an XML external entity injection vulnerability in the WeChat callback handler at POST /wechat/wechatCheck. The WechatRestApi.index method passes the raw request body to SignUtil.xmlToMap, which uses an unhardened dom4j SAXReader without DTD or external-entity...

CVE-2026-89260

MoguBlog through 6.2 is affected by an XML External Entity (XXE) injection in the unauthenticated WeChat callback endpoint at POST /wechat/wechatCheck . The WechatRestApi.index() method passes the raw request body to SignUtil.xmlToMap() , which relies on an unhardened dom4j SAXReader without DTD ...

MysqlHoneypot

项目介绍 MysqlHoneypot是一个Mysql蜜罐项目，主要借助load data local infile来获取攻击者主机Windows平台的用户名，并根据用户名进一步获取微信ID，之后根据微信ID获取用户的手机号码，登录地址等信息，主要读取的文件如下： A、通过C:/Windows/PFRO.log获取windows用户名 B、通过C:/Users/用户名/Documents/WeChat Files/All Users/config/config.data获取wxid C、通过C:/Users/用户名/Documents/WeChat...

CVE-2026-51416

1. Summary Vulnerability Type : Denial of Service / Unrestricted HTTP Response Reading CWE-400 Flagged Location : backend/internal/handler/authwechatoauth.go:1149 Vulnerability Description : The WeChat OAuth token exchange process uses io.ReadAllresp.Body to read the full upstream HTTP response...

WeChat Zero-Click Worm Took Over Accounts on iPhone and Android via Incoming Calls

Researchers at the security firm Calif have built a worm that takes over a WeChat account via an incoming call and demonstrated it spreading among three test phones. The person being called does not have to answer or touch their phone for it to work, but the caller must already be one of their...

CVE-2026-85138

A vulnerability was detected in SeaCMS up to 13.6. Affected is the function addslashes of the file weixin/index.php of the component WeChat Module. The manipulation of the argument Content results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

EUVD-2026-70534

A vulnerability was detected in SeaCMS up to 13.6. Affected is the function addslashes of the file weixin/index.php of the component WeChat Module. The manipulation of the argument Content results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

CVE-2026-85138

SeaCMS versions up to 13.6 contain a SQL injection vulnerability in the WeChat Module (file weixin/index.php). The root cause lies in the addslashes function, where improper handling of the Content argument allows remote, unauthenticated attackers to inject SQL. The attack vector is network-based...

CVE-2026-68929

FastGPT is an open-source LLM platform for building AI applications on a knowledge base. In versions prior to 4.15.2, the WeChat iLink share-channel endpoints authorize requests using only the public shareId, with no authenticated identity or team-ownership check. As a result, an unauthenticated...

CVE-2026-68929 FastGPT: Unauthenticated WeChat channel hijack and denial of service via shareId-only authorization

FastGPT is an open-source LLM platform for building AI applications on a knowledge base. In versions prior to 4.15.2, the WeChat iLink share-channel endpoints authorize requests using only the public shareId, with no authenticated identity or team-ownership check. As a result, an unauthenticated...

CVE-2026-68929

FastGPT , an open-source LLM platform, is vulnerable to unauthenticated WeChat channel hijack and denial of service in versions prior to 4.15.2 . The WeChat (iLink) share-channel endpoints authorize requests using only the publicly exposed shareId , with no authenticated identity or team-ownershi...

CVE-2026-68929 FastGPT: Unauthenticated WeChat channel hijack and denial of service via shareId-only authorization

FastGPT is an open-source LLM platform for building AI applications on a knowledge base. In versions prior to 4.15.2, the WeChat iLink share-channel endpoints authorize requests using only the public shareId, with no authenticated identity or team-ownership check. As a result, an unauthenticated...

PT-2026-82775

Name of the Vulnerable Software and Affected Versions FastGPT versions prior to 4.15.2 Description WeChat iLink share-channel endpoints authorize requests using only the public shareId without verifying authenticated identity or team ownership. Because the shareId is exposed in shared chat URLs,...

CVE-2026-32467

Subscriber Server Side Request Forgery SSRF in Aotuman Grab WeChat Articles = 2.0.1 versions...

CVE-2026-32467

CVE-2026-32467 affects the WordPress "[Aotuman] Grab WeChat Articles" plugin up to version 2.0.1. Authenticated subscribers can trigger an SSRF by causing the server to fetch arbitrary internal/external URLs, enabling internal network probing or external requests. CVSS 6.0 MEDIUM (AV:N/AC:H/PR:L/...