Pavel Durov Criticizes Outdated Laws After Arrest Over Telegram Criminal Activity

Telegram CEO Pavel Durov has broken his silence nearly two weeks after his arrest in France, stating the charges are misguided. "If a country is unhappy with an internet service, the established practice is to start a legal action against the service itself," Durov said in a 600-word statement on...

macOS Version of HZ RAT Backdoor Targets Chinese Messaging App Users

Users of Chinese instant messaging apps like DingTalk and WeChat are the target of an Apple macOS version of a backdoor named HZ RAT. The artifacts "almost exactly replicate the functionality of the Windows version of the backdoor and differ only in the payload, which is received in the form of...

Telegram Founder Pavel Durov Arrested in France for Content Moderation Failures

Pavel Durov, founder and chief executive of the popular messaging app Telegram, was arrested in France on Saturday, according to French television network TF1. Durov is believed to have been apprehended pursuant to a warrant issued in connection with a preliminary police investigation. TF1 said t...

CVE-2024-34617

Improper handling of insufficient permission in Telephony prior to SMR Aug-2024 Release 1 allows local attackers to configure default Message application...

PT-2024-26033 · Telephony · Telephony

Name of the Vulnerable Software and Affected Versions: Telephony versions prior to SMR Aug-2024 Release 1 Description: The issue is related to the improper handling of insufficient permission in Telephony, allowing local attackers to configure the default Message application. Recommendations: For...

CVE-2024-21802

creationtimestamp| type| source ---|---|--- 2024-02-26 17:42:38+00:00| seen| https://t.me/ctinow/193558 2024-03-14 09:51:09+00:00| seen| https://t.me/ctinow/207574...

CVE-2019-2199

creationtimestamp| type| source ---|---|--- 2024-02-13 17:07:46+00:00| seen| https://t.me/ctinow/183958...

CVE-2023-48133

An issue in angel coffee mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line version v13.6.1, which originates in the kosei entertainment esportsstudioLegends applet that may disclose access tokens...

CVE-2023-43993

An issue in smaregiappmarket mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line picot.golf mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification by revealing a channel access token...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line Cleaningmakotoya mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification by revealing a channel access token...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line that originates in the applet CHRISTINA JAPAN Line version v.13.6.1 that allows remote attackers to obtain sensitive information via a crafted GET request...

Signal Zero-Day Vulnerability Rumors Refuted by Company

By Deeba Ahmed Zero-Day Scare: Signal Messaging App Emerges Unscathed After Thorough Probe. This is a post from HackRead.com Read the original post: Signal Zero-Day Vulnerability Rumors Refuted by Company...

CVE-2023-44129

The vulnerability is that the Messaging "com.android.mms" app patched by LG forwards attacker-controlled intents back to the attacker in the exported "com.android.mms.ui.QClipIntentReceiverActivity" activity. The attacker can abuse this functionality by launching this activity and then sending a...

Design/Logic Flaw

The vulnerability is that the Messaging "com.android.mms" app patched by LG forwards attacker-controlled intents back to the attacker in the exported "com.android.mms.ui.QClipIntentReceiverActivity" activity. The attacker can abuse this functionality by launching this activity and then sending a...

CVE-2023-44129

Summary: CVE-2023-44129 affects LG-patched Android Messaging (com.android.mms) via the exported activity com.android.mms.ui.QClipIntentReceiverActivity. An attacker can trigger the activity, broadcast the action com.lge.message.action.QCLIP, and send their own data with Intent.FLAG_GRANT_*; the p...

CVE-2022-48350

The HUAWEI Messaging app has a vulnerability of unauthorized file access. Successful exploitation of this vulnerability may affect confidentiality...

PT-2023-15727 · Huawei · Huawei Messaging App

Name of the Vulnerable Software and Affected Versions: HUAWEI Messaging app affected versions not specified Description: The issue concerns unauthorized file access, which may impact confidentiality upon successful exploitation. Recommendations: At the moment, there is no information about a newe...

CVE-2022-48350

CVE-2022-48350 concerns the Huawei Messaging app on HarmonyOS with a vulnerability described as unauthorized file access that can affect confidentiality. The NVD entry assigns CVSS v3.1: Network access, low attack complexity, no user interaction, no privileges required, with a High confidentialit...