Code Execution Vulnerability in Micro OA365 WeChat Office System

Micro OA365 is a simple, easy to use, free, microsoft mobile office software. A code execution vulnerability exists in Micro OA365 WeChat Office. An attacker can exploit the vulnerability to gain control of the web server...

File Upload Vulnerability in Micro OA365 WeChat Office System

Micro OA365 is a simple, easy to use, free, microsoft mobile office software. A file upload vulnerability exists in Micro OA365 WeChat Office System. An attacker can exploit the vulnerability to upload arbitrary files and gain control of the web server...

Discuz plug-in Bluegrass today wechat voting rights limit and brush votes vulnerability with python scripting-vulnerability warning-the black bar safety net

Two days before the bunch of friends online canvassing, feeling that something in the programmer before it is an irony（me is the programmer before me, when a programmer there are always people that you will be stolen QQ, attack, repair the computer。。。。） Directly into the theme, with to Tools: 1...

XSS Vulnerability in WeiPHP, an Open Source WeChat Public Platform Development Framework

WeiPHP is an easy to build, scalable open source WeChat public platform development framework, you can easily build a belong to their own WeChat public account operation platform. Open source WeChat public platform development framework WeiPHP index.php in the root directory exists an xss...

Wechat appeared“remote pop exploit”has been maxed circle of friends in reference to specific play-a vulnerability warning-the black bar safety net

This morning a 5 month 26 day, micro-channel circle of friends have a lot of friends to the lei Feng network reflect: wechat appearedXSSvulnerabilities that can be in a friends phone, remote pop up! The black bar safety net in accordance with the User Instructions, go to wechat search friends...

WeChat - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application WeChat published at the 'play' market has multiple vulnerabilities...

SQL injection vulnerability in phpwechat wechatmanage.class.php

phpwechat is a simple framework for building a PC website + wechat public platform. phpwechat wechatmanage.class.php suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information using commonly used SQL injection tools...

wechat.migu.cn XSS vulnerability

Vulnerable URL: http://wechat.migu.cn/weixin/music/playerorderSongService.jsp?jsoncallback=prompt/OPENBUGBOUNTY/...

QrlJacker - QrlJacking Exploitation Framework

A python framework which goal is to exploit QrlJacking attack vector easily Installation Requirements Python 2.7.x Requests Pillow Selenium configparser Installation on Windows After downloading the framework cd QrlJacking-Framework pip install -r requirements.txt python QRLJacker.py Installation...

WeChat has an arbitrary code execution vulnerability (badkernel)

WeChat is a free application from Tencent that provides instant messaging services for smart terminals. WeChat suffers from a remote arbitrary code execution vulnerability badkernel. Attackers using the vulnerability can carry out quasi-worm spread, and can be sent through the circle of friends a...

Wechat discovered arbitrary code execution vulnerability 3 6 0 mobile Guard provides a self-test programme-vulnerability warning-the black bar safety net

Recently, the 3 6 0 mobile Guard Alpha team-Alpha Team exclusive found wechat remote arbitrary code execution vulnerability, which was named badkernel it. 3 6 0 mobile Guard Alpha team found, through this vulnerability an attacker may access the micro-channel full control, compromise the user's...

The micro-engine technology payment/wechat/nofity.php SQL injection vulnerability

No description provided by source...

Zhengzhou Rocky Electronic Technology Co., Ltd. 686 WeChat CPS distribution system id parameter has SQL injection vulnerability

686 WeChat CPS distribution system is a CPS advertising platform system that connects merchants and promoters, promoters, WeChat public platform traffic owners by registering on the platform to promote the goods released by the merchants, the goods sold to get commission. Zhengzhou Rocky Electron...

Stickers for WhatsApp WeChat - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Stickers for WhatsApp WeChat published at the 'play' market has multiple vulnerabilities...

My WeChat Avatar - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application My WeChat Avatar published at the 'play' market has multiple vulnerabilities...

CVE-2015-6356

Cross-site scripting XSS vulnerability in the WeChat page in Cisco Social Miner 10.01 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCuw60212...

Cross site scripting

Cross-site scripting XSS vulnerability in the WeChat page in Cisco Social Miner 10.01 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCuw60212...

CVE-2015-6356

Cisco Social Miner 10.0(1) is affected by a Cross-Site Scripting (XSS) vulnerability in the WeChat page due to insufficient input validation. The issue allows remote attackers to inject arbitrary scripts via unspecified vectors. The CVE entry references Bug ID CSCuw60212. According to Cisco’s adv...

CVE-2015-6356

Cross-site scripting XSS vulnerability in the WeChat page in Cisco Social Miner 10.01 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCuw60212...

CVE-2015-6356: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the WeChat page in Cisco Social Miner 10.01 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCuw60212...