Arbitrary File Download Vulnerability in LinkWechat

LinkWeChat is an open source SCRM system based on enterprise WeChat. LinkWechat has an arbitrary file download vulnerability that can be exploited by an attacker to download arbitrary files under the system...

Tencent WeChat WXAM Decoder Out-Of-Bounds Access Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM Decoder. T...

Shenzhen Tencent Computer System Co., Ltd. government weibo has dll hijacking vulnerability (CNVD-2021-09532)

Government WeChat is a smart office solution for the government provided by Tencent's Enterprise WeChat team on the basis of the original Enterprise WeChat. Shenzhen Tencent Computer Systems Limited Government WeChat has a dll hijacking vulnerability, which can be exploited by attackers to cause...

Shenzhen Tencent Computer Systems Limited Government WeChat suffers from dll hijacking vulnerability

Government WeChat is a smart office solution for the government provided by Tencent's Enterprise WeChat team on the basis of the original Enterprise WeChat. Shenzhen Tencent Computer Systems Limited Government WeChat has a dll hijacking vulnerability, which can be exploited by attackers to cause...

Shenzhen Tencent Computer System Co., Ltd.'s Government WeChat suffers from dll hijacking vulnerability (CNVD-2021-09531)

Government WeChat is a smart office solution for the government provided by Tencent's Enterprise WeChat team on the basis of the original Enterprise WeChat. Shenzhen Tencent Computer Systems Limited Government WeChat has a dll hijacking vulnerability, which can be exploited by attackers to cause...

JIZHICMS Cross-Site Scripting Vulnerability (CNVD-2021-02998)

JIZHICMS Extreme CMS is an open source, free, commercial license-free website building system. A cross-site scripting vulnerability exists in Home/c/WechatController.php in JIZHICMS 1.7.1. An attacker can inject arbitrary Web script or HTML via index.php/Wechat/checkWeixin?signature=1&echostr=XSS...

WeChat program has unauthorized access vulnerability

WeChat is a cell phone communication software. An unauthorized access vulnerability exists in the WeChat program, which can be exploited by an attacker to obtain sensitive information...

CVE-2020-23643

XSS exists in JIZHICMS 1.7.1 via index.php/Wechat/checkWeixin?signature=1&echostr=XSS to Home/c/WechatController.php...

Enterprise WeChat (Windows client) suffers from dll hijacking vulnerability

Enterprise WeChat is a professional office management tool created by Tencent WeChat team for enterprises. A dll hijacking vulnerability exists in Enterprise WeChat Windows client. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...

WeChat Pay has a flawed logic vulnerability

WeChat is a free application launched by Tencent on January 21, 2011 to provide instant messaging services for smart terminals. A logic flaw vulnerability exists in WeChat Pay, which can be exploited by attackers to compromise confidentiality and integrity...

ai.hyacinth.framework:core-service-admin-server (>=0.5.0 <=0.5.24), ai.hyacinth.framework:core-service-discovery-server (>=0.5.0 <=0.5.24) +5475 more potentially affected by CVE-2020-26258 via com.thoughtworks.xstream:xstream (>=1.1.1 <=1.4.14)

com.thoughtworks.xstream:xstream MAVEN version =1.1.1, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =j8.2.2.0, =Finchley.SR4, =1.0.0.RELEASE, =1.1.0.RELEASE, =1.0.0.RELEASE, =1.1.1.RELEASE, =0.3.3, =0.4.0, =0.4.2 and more Source cves: CVE-2020-26258 Source advisory: OSV:GHSA-4CCH-WXPW-8P28...

ai.hyacinth.framework:core-service-admin-server (>=0.5.0 <=0.5.24), ai.hyacinth.framework:core-service-discovery-server (>=0.5.0 <=0.5.24) +5475 more potentially affected by CVE-2020-26259 via com.thoughtworks.xstream:xstream (>=1.1.1 <=1.4.14)

com.thoughtworks.xstream:xstream MAVEN version =1.1.1, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =j8.2.2.0, =Finchley.SR4, =1.0.0.RELEASE, =1.1.0.RELEASE, =1.0.0.RELEASE, =1.1.1.RELEASE, =0.3.3, =0.4.0, =0.4.2 and more Source cves: CVE-2020-26259 Source advisory: OSV:GHSA-JFVX-7WRX-43FH...

Weixin open source WeChat public number management system has XSS vulnerabilities

The business scope of Cebu City Taosheng Network Technology Co., Ltd. includes: network technology research and development, consulting, services, electronic equipment sales, Internet information services, operating telecommunications business, etc...

Enterprise WeChat (Windows client) suffers from dll hijacking vulnerability

Enterprise WeChat is an office communication tool for all types of business and organizational users. In addition to WeChat-like chat functions, Enterprise WeChat also integrates public phone and email functions. A dll hijacking vulnerability exists in Enterprise WeChat Windows client. An attacke...

SQL Injection Vulnerability in bymall Multi-User Mall System

Bymall multi-user mall system is the Bay Cloud development of self-employment + Merchants stationed B2B2C system, but also includes WeChat e-commerce system, spike chopping distribution, marketing full coverage, small program mall system, open the new era of small program live selling goods,...

Arbitrary File Read Vulnerability in Jeewx-Boot Free WeChat Butler Platform of Beijing National Torch Information Technology Co.

JeewxBoot is a free JAVA WeChat Butler platform that supports WeChat public numbers, small programs, WeChat third-party platforms, sweepstakes and more. Beijing Guo Torch Information Technology Co., Ltd Jeewx-Boot Free WeChat Butler Platform has an arbitrary file read vulnerability that can be...

XSS Vulnerability in Microsoft CMS

Micro Window CMS is a free and open source WeChat public number and Alipay service window management platform system. Micro Window CMS suffers from an XSS vulnerability, which originates from improper filtering of parameters passed into the system during registration. Attackers can use this...

ai.hyacinth.framework:core-service-admin-server (>=0.5.0 <=0.5.24), ai.hyacinth.framework:core-service-discovery-server (>=0.5.0 <=0.5.24) +5214 more potentially affected by CVE-2020-26217 via com.thoughtworks.xstream:xstream (>=1.1.1 <=1.4.13)

com.thoughtworks.xstream:xstream MAVEN version =1.1.1, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =j8.2.2.0, =Finchley.SR4, =1.0.0.RELEASE, =1.1.0.RELEASE, =1.0.0.RELEASE, =1.1.1.RELEASE, =0.3.3, =0.4.0, =0.4.2 and more Source cves: CVE-2020-26217 Source advisory: OSV:GHSA-MW36-7C6C-Q4Q2...

SQL Injection Vulnerability in Shield Spirit Voting Voter System for Front-end User Modification Data

Shield Spirit Voting Powder Sucking System can be applied to the public number, through the WeChat public number of the message interface to collect the user to send the vote number of the data to reach the vote, with anti-brush voting voting function, but also efficiently suck the live powder...

Stored Cross-Site Scripting Vulnerability in Ant Notes

Ant Notes is a cloud notes software, cross-platform, support markdown format, support for web, PC, mobile APP client, and WeChat version, support for generating public blogs and PDF. Ant Notes has a stored cross-site scripting vulnerability. Attackers can use the vulnerability to obtain sensitive...