Tencent WeChat WXAM Decoder Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM...

Malicious code in wechat-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bdbec2dd8690cb93d6d50b709cb398ad94ee2b74ddaac42cc93a933bd041c9fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7110 Malicious code in wechat-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bdbec2dd8690cb93d6d50b709cb398ad94ee2b74ddaac42cc93a933bd041c9fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wechat-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 450f4876c8a2bc471ce361f2312e7e83d8e576d55cdbbd10d910b0356b6ae233 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7109 Malicious code in wechat-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware efd434b2a8213da1c5ca378be682695bb852927e8922e808a2efb0e76df157dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wechat-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware efd434b2a8213da1c5ca378be682695bb852927e8922e808a2efb0e76df157dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7113 Malicious code in wechat-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 450f4876c8a2bc471ce361f2312e7e83d8e576d55cdbbd10d910b0356b6ae233 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wechat-user (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed674eef3c547c5b88c4d1f78f844e5bc4653a001ad23538ade6652afb5feb0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7114 Malicious code in wechat-user (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed674eef3c547c5b88c4d1f78f844e5bc4653a001ad23538ade6652afb5feb0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7115 Malicious code in wechat-web-login (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b586c23c600833d8a48686acbfa907bb25a5721bdf793c96da22190c15cd83be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wechat-web-login (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b586c23c600833d8a48686acbfa907bb25a5721bdf793c96da22190c15cd83be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wechat-rn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e869f3410b7769bc139296cbdc4a1f7b42e50157e39cbddb01328611883ca7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wechat-mobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d33ded9daa26b1d3dac127b3e5efc1765043c402e1fd200c666be59bf9fcb48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7112 Malicious code in wechat-rn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e869f3410b7769bc139296cbdc4a1f7b42e50157e39cbddb01328611883ca7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7111 Malicious code in wechat-mobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d33ded9daa26b1d3dac127b3e5efc1765043c402e1fd200c666be59bf9fcb48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WeChat Pay Java SDK allows XXE

WXPayUtil in WeChat Pay Java SDK allows XXE attacks involving a merchant notification URL...

GHSA-GQGV-2GP3-QQP3 WeChat Pay Java SDK allows XXE

WXPayUtil in WeChat Pay Java SDK allows XXE attacks involving a merchant notification URL...

app.myoss.wechat:wechat-starter-core (>=1.0.0.RELEASE <=1.1.0.RELEASE), app.myoss.wechat:wechat-starter-mini-app (=1.1.0.RELEASE) +42 more potentially affected by CVE-2019-5312 via com.github.binarywang:weixin-java-common (>=1.3.4 <=3.3.1.B)

com.github.binarywang:weixin-java-common MAVEN version =1.3.4, =1.0.0.RELEASE, =1.0.0.RELEASE, =1.0.0.RELEASE, =1.3.4, =2.6.4.BETA, =1.3.4, =2.8.7.BETA, =2.2.3, =2.5.2.BETA, =0.0.1, =0.0.1, =0.0.14 and more Source cves: CVE-2019-5312 Source advisory: OSV:GHSA-H755-H99P-9FFV...

赞赞网络科技 EyouCms 代码问题漏洞

Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A security vulnerability exists in EyouCms V1.5.4-UTF8-SP3, which originates from the wechatreturn function in /controller/Index.php that passes the...

ai.hyacinth.framework:core-service-admin-server (>=0.5.0 <=0.5.24), ai.hyacinth.framework:core-service-discovery-server (>=0.5.0 <=0.5.24) +6563 more potentially affected by CVE-2021-43859 via com.thoughtworks.xstream:xstream (>=1.1.1 <=1.4.18)

com.thoughtworks.xstream:xstream MAVEN version =1.1.1, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =j8.2.2.0, =Finchley.SR4, =1.0.0.RELEASE, =1.1.0.RELEASE, =1.0.0.RELEASE, =1.1.1.RELEASE, =0.3.3, =0.4.0, =0.4.2 and more Source cves: CVE-2021-43859 Source advisory: OSV:GHSA-RMR5-CPV2-VGJF...