70 matches found
CVE-2025-9297
A vulnerability was detected in Tenda i22 1.0.0.34687. This impacts the function formWeixinAuthInfoGet of the file /goform/wxportalauth. Performing manipulation of the argument Type results in stack-based buffer overflow. The attack can be initiated remotely. The exploit is now public and may be...
Malicious code in weixin-widget (npm)
The package weixin-widget was found to contain malicious code...
MAL-2025-39073 Malicious code in weixin-widget (npm)
The package weixin-widget was found to contain malicious code...
CVE-2018-20318
An issue was discovered in weixin-java-tools v3.2.0. There is an XXE vulnerability in the getXmlDoc method of the BaseWxPayResult.java file...
WordPress WP Weixin plugin <= 1.3.16 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Nabil Irawan in WordPress Theme WP Weixin versions = 1.3.16...
CVE-2025-25792
SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the isopen parameter at adminweixin.php...
ywoa 代码问题漏洞
ywoa is an OA collaborative office system by the Chinese bestfeng individual developer. A code issue vulnerability exists in ywoa version 2024.07.03 and earlier versions, which originates from the extract function of the WXCallBack Interface component's...
PT-2024-28894 · Seacms · Seacms
Name of the Vulnerable Software and Affected Versions: SeaCMS version 12.9 Description: The issue is caused by admin weixin.php directly splicing and writing user input data into weixin.php without processing it. This allows authenticated attackers to execute arbitrary commands and obtain system...
vulSystem
This repository appears to be a collection of tools and scripts for web scraping and data collection, likely used for research or analysis purposes. The tools are written in Python and utilize various libraries such as BeautifulSoup and requests. The repository contains several scripts, including...
CVE-2024-27565
A Server-Side Request Forgery SSRF in weixin.php of ChatGPT-wechat-personal commit a0857f6 allows attackers to force the application to make arbitrary requests...
ChatGPT-wechat-personal Security Vulnerability
ChatGPT-wechat-personal is to realize the function of ChatGPT chatbot in WeChat personal subscription number by calling OpenAI latest interface and gpt-3.5-turbo model. A security vulnerability exists in ChatGPT-wechat-personal version a0857f6, which stems from a Server Request Forgery SSRF...
PT-2024-21949 · Unknown · Chatgpt-Wechat-Personal
Name of the Vulnerable Software and Affected Versions: ChatGPT-wechat-personal affected versions not specified Description: A Server-Side Request Forgery SSRF issue in weixin.php of ChatGPT-wechat-personal allows attackers to force the application to make arbitrary requests. This enables attacker...
CVE-2024-1353
A vulnerability, which was classified as critical, has been found in PHPEMS up to 1.0. Affected by this issue is the function index of the file app/weixin/controller/index.api.php. The manipulation of the argument picurl leads to deserialization. The exploit has been disclosed to the public and m...
PHPEMS 代码问题漏洞
PHPEMS is a PHP online mock exam system. PHPEMS has a deserialization vulnerability, the vulnerability arises because there is a function index in app/weixin/controller/index.api.php, which can be exploited by an attacker to cause deserialization via the parameter picurl...
CVE-2023-51090
Tenda M3 V1.0.0.124856 was discovered to contain a stack overflow via the function formGetWeiXinConfig...
CVE-2023-44847
An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin Weixin.php component...
SeaCMS Security Vulnerability
SeaCMS is a free and open source web content management system written in PHP. The system is primarily designed to be used to manage video-on-demand resources. A security vulnerability exists in SeaCMS version v.12.8, which stems from a vulnerability that allows attackers to execute arbitrary cod...
PT-2023-29308 · Seacms · Seacms
Name of the Vulnerable Software and Affected Versions: SeaCMS version 12.8 Description: An issue in the admin Weixin.php component allows an attacker to execute arbitrary code. Recommendations: For SeaCMS version 12.8, at the moment, there is no information about a newer version that contains a f...