(0Day) Tencent WeChat WXAM Decoder Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM...

Xiaomi Phone Bug Allowed Payment Forgery

Smartphone maker Xiaomi, the world’s number three phone maker behind Apple and Samsung, reported it has patched a high-severity flaw in its “trusted environment” used to store payment data that opened some of its handsets to attack. Researchers at Check Point Research revealed last week in a repo...

CVE-2021-40180

In the WeChat application 8.0.10 for Android and iOS, a mini program can obtain sensitive information from a user's address book via wx.searchContacts...

CVE-2021-40180

In the WeChat application 8.0.10 for Android and iOS, a mini program can obtain sensitive information from a user's address book via wx.searchContacts...

CVE-2021-40180

In the WeChat application 8.0.10 for Android and iOS, a mini program can obtain sensitive information from a user's address book via wx.searchContacts...

Design/Logic Flaw

In the WeChat application 8.0.10 for Android and iOS, a mini program can obtain sensitive information from a user's address book via wx.searchContacts...

CVE-2021-40180

In the WeChat application 8.0.10 for Android and iOS, a mini program can obtain sensitive information from a user's address book via wx.searchContacts...

CVE-2021-40180

According to connected documents, CVE-2021-40180 affects WeChat app version 8.0.10 for Android and iOS, where a mini program can invoke wx.searchContacts to access the user's address book and obtain sensitive information. The root cause is a permissions/API misuse in the mini program environment ...

PT-2022-11201 · Tencent · Wechat

Name of the Vulnerable Software and Affected Versions: WeChat versions 8.0.10 Description: A mini program in the WeChat application can obtain sensitive information from a user's address book via wx.searchContacts. This issue allows unauthorized access to user data. Recommendations: For WeChat...

Tencent WeChat 信息泄露漏洞

Tencent WeChat 微信 is an online social networking application from the Chinese company Tencent. The program supports sending voice messages, videos, images, and text, among others. A security vulnerability exists in Tencent WeChat version 8.0.10, which stems from an applet that can obtain sensitiv...

CVE-2021-40180: Exposure of Sensitive Information to an Unauthorized Actor

In the WeChat application 8.0.10 for Android and iOS, a mini program can obtain sensitive information from a user's address book via wx.searchContacts...

Tencent WeChat WXAM Decoder Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM decoder. T...

Tencent WeChat WXAM Decoder Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM...

Malicious code in wechat-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bdbec2dd8690cb93d6d50b709cb398ad94ee2b74ddaac42cc93a933bd041c9fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7110 Malicious code in wechat-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bdbec2dd8690cb93d6d50b709cb398ad94ee2b74ddaac42cc93a933bd041c9fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wechat-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 450f4876c8a2bc471ce361f2312e7e83d8e576d55cdbbd10d910b0356b6ae233 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7109 Malicious code in wechat-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware efd434b2a8213da1c5ca378be682695bb852927e8922e808a2efb0e76df157dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wechat-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware efd434b2a8213da1c5ca378be682695bb852927e8922e808a2efb0e76df157dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7113 Malicious code in wechat-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 450f4876c8a2bc471ce361f2312e7e83d8e576d55cdbbd10d910b0356b6ae233 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wechat-user (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed674eef3c547c5b88c4d1f78f844e5bc4653a001ad23538ade6652afb5feb0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...