CVE-2020-23349_Lab

CVE-2020-23349 Android Lab An educational project that reproduces the Intent Redirection vulnerability in Sina Weibo Android SDK 4.2.7 locally. Use only on authorized test devices or emulators. Do not use it against real user apps. Structure victim: vulnerable app that includes the actual...

EUVD-2026-95308

Jivejdon through 5.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to access Weibo-created accounts by deriving predictable credentials from public Weibo user IDs. OAuthAccountServiceImp.transferSina sets the password to the first four digits of the Weibo I...

CVE-2026-107828

Jivejdon through 5.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to access Weibo-created accounts by deriving predictable credentials from public Weibo user IDs. OAuthAccountServiceImp.transferSina sets the password to the first four digits of the Weibo I...

CVE-2026-107828

Jivejdon versions through 5.0 are vulnerable to an authentication bypass due to the use of weak credentials. The root cause is located in OAuthAccountServiceImp.transferSina(), which sets a user's password to the first four digits of their public Weibo ID during OAuth registration. This allows un...

CVE-2026-107828 Jivejdon through 5.0 Predictable Passwords via Sina Weibo OAuth Login

Jivejdon through 5.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to access Weibo-created accounts by deriving predictable credentials from public Weibo user IDs. OAuthAccountServiceImp.transferSina sets the password to the first four digits of the Weibo I...

CVE-2026-107828 Jivejdon through 5.0 Predictable Passwords via Sina Weibo OAuth Login

Jivejdon through 5.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to access Weibo-created accounts by deriving predictable credentials from public Weibo user IDs. OAuthAccountServiceImp.transferSina sets the password to the first four digits of the Weibo I...

CVE-2026-107828

Jivejdon through 5.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to access Weibo-created accounts by deriving predictable credentials from public Weibo user IDs. OAuthAccountServiceImp.transferSina sets the password to the first four digits of the Weibo I...

PT-2026-108262

Jivejdon through 5.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to access Weibo-created accounts by deriving predictable credentials from public Weibo user IDs. OAuthAccountServiceImp.transferSina sets the password to the first four digits of the Weibo I...

CVE-2026-107828: Use of Weak Credentials

Jivejdon through 5.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to access Weibo-created accounts by deriving predictable credentials from public Weibo user IDs. OAuthAccountServiceImp.transferSina sets the password to the first four digits of the Weibo I...

Exploit for CVE-2020-23349

CVE-2020-23349 Android Lab Sina Weibo Android SDK 4.2.7의 Inte...

Jeesns 1.4.2 - Cross-Site Scripting Detection

Jeesns 1.4.2 is vulnerable to reflected cross-site scripting in the /weibo/topic component and allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the system error message's text field. !/usr/bin/env python3 -- coding: utf-8 -- """Jeesns 1.""" from kittysploit impor...

CVE-2019-16572

Jenkins Weibo Plugin 1.0.1 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

EUVD-2014-6683

Malware in sbrugna...

EUVD-2012-1414

Malware in sbrugna...

EUVD-2020-16097

Malware in sbrugna...

EUVD-2020-11195

Malware in sbrugna...

EUVD-2022-2561

Malicious code in bioql PyPI...

Taiwan NSB Alerts Public on Data Risks from Douyin, Weibo, and RedNote Over China Ties

Taiwan's National Security Bureau NSB has warned that China-developed applications like RedNote aka Xiaohongshu, Weibo, Douyin, WeChat, and Baidu Cloud pose security risks due to excessive data collection and data transfer to China. The alert comes following an inspection of these apps carried ou...

CVE-2020-19290

A stored cross-site scripting XSS vulnerability in the /weibo/comment component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Weibo comment section...

CVE-2020-19291

A stored cross-site scripting XSS vulnerability in the /weibo/publishdata component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in a posted Weibo...