SQL Injection Vulnerability in JeewxBoot WeChat Manager Platform

JeewxBoot WeChat Butler Platform is a free JAVA WeChat Butler Platform that supports WeChat public number, small program, WeChat third-party platforms, sweepstakes and so on. JeewxBoot WeChat Butler Platform suffers from a SQL injection vulnerability that can be exploited by attackers to obtain...

UPDATE – TikTok Ban: Security Experts Weigh in on the App's Risks

UPDATE Chinese apps TikTok and WeChat over the weekend have gotten an 11th hour reprieve from a plan to cut off access to them. As a ban on U.S. downloads loomed for Sunday, TikTok owner ByteDance reached an agreement to sell significant ownership stakes to Oracle and Walmart. While the deal is...

How WeChat Censored the Coronavirus Pandemic

In China, the messaging platform blocked thousands of keywords related to the virus, a new report reveals...

Unauthorized Access Vulnerability in JeewxBoot of Beijing National Torch Information Technology Co.

JeewxBoot is a SpringBoot-based open source WeChat housekeeper system , using SpringBoot2.1.3 Mybatis + Velocity framework technology. Beijing State Torch Information Technology Co. JeewxBoot has an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive informati...

Unauthorized Access Vulnerability in JeewxBoot of Beijing National Torch Information Technology Co.

JeewxBoot is a SpringBoot-based open source WeChat housekeeper system , using SpringBoot2.1.3 Mybatis + Velocity framework technology. Beijing State Torch Information Technology Co. JeewxBoot has an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive informati...

Wechat Brodcast Project Directory Traversal (CVE-2018-16283)

A directory traversal vulnerability exists in wechat brodcast project wechat brodcast x=1.2.0. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...

SQL Injection Vulnerability in Shield Spirit Commodity Promotion System

Shield Spirit commodity promotion system can be applied to multiple types of public number, personal or business subscription number and service number can be used, easy to docking all kinds of public number, through the WeChat public number of the relevant interfaces configured to come into effe...

SQL Injection Vulnerability in Shield Spirit Commodity Promotion System (CNVD-2020-33194)

Shield Spirit commodity promotion system can be applied to multiple types of public number, personal or business subscription number and service number can be used, easy to docking all kinds of public number, through the WeChat public number of the relevant interfaces configured to come into effe...

Command execution vulnerability in weiphp Ad***.cl***.php

WeiPHP is an open source WeChat public platform development framework, can easily build a personal WeChat public account operation platform. A command execution vulnerability exists in weiphp Ad.cl.php, which can be exploited by attackers to gain server privileges...

SQL Injection Vulnerability in Lotus Coupon System

LOTUS Coupon System is a WeChat-based e-coupon operation and distribution system for merchants in the same city, which allows merchants to issue coupons online, underwrite online and realize the functions of underwriting as a member. There is a SQL injection vulnerability in the LODE Coupon Syste...

Chengdu Crazy Horse Crazy Horse Technology Co., Ltd Crazy Horse Fitness WeChat mini-program has a logic flaw vulnerability

Chengdu Crazy Horse Crazy Horse Technology Co. was founded on December 27, 2017 . The company's business scope includes: software research and development, technical development of network equipment, technical consulting, technical services, technology transfer and so on. Chengdu Crazy Horse Craz...

WeiPHP suffers from an information leakage vulnerability

WeiPHP is an open source WeChat public platform development framework to build a personal WeChat public account operation platform. WeiPHP suffers from an information disclosure vulnerability. An attacker can exploit this vulnerability to obtain sensitive information...

SQL Injection Vulnerability in Ziou Technology's Lotto Coupon System

LOTUS Coupon System is a WeChat-based e-coupon operation and distribution system for merchants in the same city. There is a SQL injection vulnerability in Ziou Technology's LODE Same Town Coupon System, which can be exploited by attackers to obtain sensitive information from the database...

Logic Flaw Vulnerability in Shop7 Online Shopping System Flagship Edition

Shop7 online shopping system flagship version is to support Alipay, WeChat payment and a variety of commonly used interfaces, computer version and cell phone version and APP seamless combination of data as a whole. Shop7 online shopping system flagship version of the existence of logical flaws in...

XSS Vulnerability in WeiPHP of Shenzhen Yuanmeng Cloud Technology Co. Ltd (CNVD-2020-28790)

WeiPHP is an open source WeChat public platform development framework to build a personal WeChat public account operation platform. Shenzhen Yuanmeng Yun Technology Co., Ltd WeiPHP exists XSS vulnerability, attackers can use the vulnerability in the case of not logging in by inserting malicious j...

Shenzhen Yuanmeng Yun Technology Co., Ltd. WeiPHP has arbitrary file deletion vulnerability

WeiPHP is an open source WeChat public platform development framework to build a personal WeChat public account operation platform. Shenzhen Yuanmeng Cloud Technology Co. WeiPHP has an arbitrary file deletion vulnerability. An attacker can exploit this vulnerability to delete arbitrary files on t...

Unauthorized Access Vulnerability in Grindstone Reading App

Grindstone Reading App is a reading software. Unauthorized access vulnerability exists in Grinding Iron Reading APP. An attacker can use the vulnerability to obtain the transaction information of WeChat Payment backend...

Weiphp 5.0 beta frontend Ma***.php page has XSS vulnerability

WeiPHP is an open source WeChat public platform development framework, can easily build a personal WeChat public account operation platform. An XSS vulnerability exists in the Weiphp 5.0 beta frontend Ma.php page. An attacker can use this vulnerability to insert malicious js code to obtain user...

WeChat PC version suffers from dll hijacking vulnerability

WeChat for PC is a cross-platform communication tool. WeChat PC version suffers from a dll hijacking vulnerability, which can be exploited by attackers to load a malicious dll and execute arbitrary code...

Microdistribution has a flawed logic vulnerability

Micro Distribution is a WeChat distribution platform tailored for businesses. Micro distribution has a logic flaw vulnerability, an attacker can use the vulnerability to overstep the right to modify the entire network of users' shipping address information...