MAL-2022-7114 Malicious code in wechat-user (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed674eef3c547c5b88c4d1f78f844e5bc4653a001ad23538ade6652afb5feb0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7115 Malicious code in wechat-web-login (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b586c23c600833d8a48686acbfa907bb25a5721bdf793c96da22190c15cd83be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wechat-web-login (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b586c23c600833d8a48686acbfa907bb25a5721bdf793c96da22190c15cd83be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wechat-rn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e869f3410b7769bc139296cbdc4a1f7b42e50157e39cbddb01328611883ca7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wechat-mobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d33ded9daa26b1d3dac127b3e5efc1765043c402e1fd200c666be59bf9fcb48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7112 Malicious code in wechat-rn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e869f3410b7769bc139296cbdc4a1f7b42e50157e39cbddb01328611883ca7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7111 Malicious code in wechat-mobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d33ded9daa26b1d3dac127b3e5efc1765043c402e1fd200c666be59bf9fcb48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WeChat Pay Java SDK allows XXE

WXPayUtil in WeChat Pay Java SDK allows XXE attacks involving a merchant notification URL...

GHSA-GQGV-2GP3-QQP3 WeChat Pay Java SDK allows XXE

WXPayUtil in WeChat Pay Java SDK allows XXE attacks involving a merchant notification URL...

赞赞网络科技 EyouCms 代码问题漏洞

Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A security vulnerability exists in EyouCms V1.5.4-UTF8-SP3, which originates from the wechatreturn function in /controller/Index.php that passes the...

Wechat-php-sdk is affected by a Cross Site Scripting vulnerability.

Wechat-php-sdk v1.10.2 is affected by a Cross Site Scripting XSS vulnerability in Wechat.php...

GHSA-RWQQ-P4P9-5WPQ Wechat-php-sdk is affected by a Cross Site Scripting vulnerability.

Wechat-php-sdk v1.10.2 is affected by a Cross Site Scripting XSS vulnerability in Wechat.php...

CVE-2021-43678

Wechat-php-sdk v1.10.2 is affected by a Cross Site Scripting XSS vulnerability in Wechat.php...

CVE-2021-43678

Wechat-php-sdk v1.10.2 is affected by a Cross Site Scripting XSS vulnerability in Wechat.php...

CVE-2021-43678

Wechat-php-sdk v1.10.2 is affected by a Cross Site Scripting XSS vulnerability in Wechat.php...

Cross site scripting

Wechat-php-sdk v1.10.2 is affected by a Cross Site Scripting XSS vulnerability in Wechat.php...

CVE-2021-43678

CVE-2021-43678 affects the PHP package wechat-php-sdk v1.10.2, with the vulnerability located in the Wechat.php file. Multiple connected advisories describe a Cross Site Scripting (XSS) vulnerability arising from insufficient sanitization, notably in the serve() function cited by Veracode. Exploi...

CVE-2021-43678

Wechat-php-sdk v1.10.2 is affected by a Cross Site Scripting XSS vulnerability in Wechat.php...

CVE-2021-43678: Improper Neutralization of Input During Web Page Generation

Wechat-php-sdk v1.10.2 is affected by a Cross Site Scripting XSS vulnerability in Wechat.php...

Wechat-Php-Sdk 跨站脚本漏洞

Wechat-Php-Sdk is a WeChat Public Platform Php version development kit for Gaoming13 individual developers in China. Wechat-php-sdk suffers from a Cross Site Scripting vulnerability, which stems from an XSS Cross Site Scripting vulnerability in Wechat-php-sdk v1.10.2. An attacker can exploit this...