255 matches found
Google Play Diibear 安全漏洞
Google Play Diibear is an application from Google Play. It provides a feature that allows parents to use the application to stay in touch with the kindergarten and get information about their children's learning and play as well as kindergarten newsletters and announcements. A security...
Debian: Security Advisory (DLA-2562-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DLA-2562-1 : mumble security update
It was discovered that there was a a remote code execution vulnerability in mumble, a VoIP client commonly used for group chats. The exploit could have been been triggered by a maliciously crafted URL on the server list. For Debian 9 'Stretch', this problem has been fixed in version...
One sticker could have exposed your Telegram secret chats
By Waqas The flaw originated in the way the Telegram app handled animated stickers and how the secret chat functionality operated. This is a post from HackRead.com Read the original post: One sticker could have exposed your Telegram secret chats...
A Sticker Sent On Telegram Could Have Exposed Your Secret Chats
Cybersecurity researchers on Monday disclosed details of a now-patched flaw in the Telegram messaging app that could have exposed users' secret messages, photos, and videos to remote malicious actors. The issues were discovered by Italy-based Shielder in iOS, Android, and macOS versions of the ap...
A Sticker Sent On Telegram Could Have Exposed Your Secret Chats
Cybersecurity researchers on Monday disclosed details of a now-patched flaw in the Telegram messaging app that could have exposed users' secret messages, photos, and videos to remote malicious actors. The issues were discovered by Italy-based Shielder in iOS, Android, and macOS versions of the ap...
Secret Chat in Telegram Left Self-Destructing Media Files On Devices
Popular messaging app Telegram fixed a privacy-defeating bug in its macOS app that made it possible to access self-destructing audio and video messages long after they disappeared from secret chats. The vulnerability was discovered by security researcher Dhiraj Mishra in version 7.3 of the app, w...
Fleeing WhatsApp for Privacy? Don't Turn to Telegram
Because the chat app doesn't encrypt conversations by default—or at all for group chats—security professionals often warn against it...
WhatsApp Delays Controversial 'Data-Sharing' Privacy Policy Update By 3 Months
WhatsApp said on Friday that it wouldn't enforce its recently announced controversial data sharing policy update until May 15. Originally set to go into effect next month on February 8, the three-month delay comes following "a lot of misinformation" about a revision to its privacy policy that...
Researchers: Instagram, LinkedIn Vulnerable to Preview-Link RCE Security Woes
UPDATE Link previews in popular chat apps on iOS and Android are a firehose of security and privacy issues, researchers have found. At risk are Facebook Messenger, LINE, Slack, Twitter Direct Messages, Zoom and many others. In the case of Instagram and LinkedIn, it’s even possible to execute remo...
Experts Warn of Privacy Risks Caused by Link Previews in Messaging Apps
Cybersecurity researchers over the weekend disclosed new security risks associated with link previews in popular messaging apps that cause the services to leak IP addresses, expose links sent via end-to-end encrypted chats, and even unnecessarily download gigabytes of data stealthily in the...
PT-2020-16711 · Bigbluebutton · Bigbluebutton
Name of the Vulnerable Software and Affected Versions: BigBlueButton versions prior to 2.2.7 Description: The issue arises from the lockSettingsProps.disablePrivateChat setting not being applied to chats that are already open. This problem is located in the...
Dating Apps Exposed 845 GB of Explicit Photos, Chats, and More
3somes, Gay Daddy Bear, and Herpes Dating are among the nine services that leaked the data of hundreds of thousands of users...
JetBrains Space Chats Cross-Site Scripting Vulnerability
JetBrains Space is a team collaboration solution from the Czech company JetBrains. The product supports online chat, online meetings, code review and package repository, etc. Chats is one of the online chat components. A cross-site scripting vulnerability exists in Chats in JetBrains Space versio...
CVE-2020-11416
JetBrains Space through 2020-04-22 allows stored XSS in Chats...
CVE-2020-11416
JetBrains Space through 2020-04-22 allows stored XSS in Chats...
Cross site scripting
JetBrains Space through 2020-04-22 allows stored XSS in Chats...
CVE-2020-11416
JetBrains Space Chats suffer from stored XSS through 2020-04-22 due to insufficient validation of client-side data in the web application. Affected component: Space Chats in JetBrains Space (Space product). Root cause (per CNVD-2020-25754): lack of proper validation of client-side data in the WEB...
