CVE-2015-8833: Undefined Security Weakness

Use-after-free vulnerability in the createsmpdialog function in gtk-dialog.c in the Off-the-Record Messaging OTR pidgin-otr plugin before 4.0.2 for Pidgin allows remote attackers to execute arbitrary code via vectors related to the "Authenticate buddy" menu item...

WhatsApp Encryption: A Good Start, but Far from a Security Panacea

WhatsApp’s addition of end-to-end encryption is a good start, but does not present users with a complete solution that protects against the prying eyes of intrusive governments and nosey third-parties. That’s the consensus among privacy and security experts that commend Facebook-owned WhatsApp fo...

WhatsApp turns on End-to-End Encryption by default for its 1 Billion Users

WhatsApp is updating its messaging app so that every text message and voice call will be encrypted for the company’s one billion users. Yes, Whatsapp has finally implemented full end-to-end encryption, as promised a year ago. This means, from now every message, image or voice call you made will b...

Data Leaking 'Surreptitious Sharing' Vulnerability Identified in Android API

Researchers have identified a vulnerability in an Android API used by messaging apps such as Skype and perhaps more concerning, privacy-centric apps such as Signal, and Telegram, that could lead to privilege escalation and data loss including private keys. Dominik Schürmann and Lars Wolf,...

Family Locator & Messaging - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Family Locator & Messaging published at the 'play' market has multiple vulnerabilities...

Messaging+ 6 - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Messaging+ 6 published at the 'play' market has multiple vulnerabilities...

Callgram messaging with calls - Customized SSL, GPL license, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Callgram messaging with calls published at the 'play' market has multiple vulnerabilities...

Phreasy - Messaging Helper - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Phreasy - Messaging Helper published at the 'play' market has multiple vulnerabilities...

YAP Messaging - Customized SSL, Dangerous filesystem permissions, LGPL license vulnerabilities

HackApp vulnerability scanner discovered that application YAP Messaging published at the 'play' market has multiple vulnerabilities...

Messaging smart extension - Exported components, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Messaging smart extension published at the 'play' market has multiple vulnerabilities...

Avaamo- Business Messaging - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Avaamo- Business Messaging published at the 'play' market has multiple vulnerabilities...

MesLang Messaging Translation - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application MesLang Messaging Translation published at the 'play' market has multiple vulnerabilities...

[SECURITY] Fedora 24 Update: libotr-4.1.1-1.fc24

Off-the-Record Messaging Library and Toolkit This is a library and toolkit which implements Off-the-Record OTR Messagi ng. OTR allows you to have private conversations over IM by providing Encryptio n, Authentication, Deniability and Perfect forward secrecy...

MiCollab 7.0 - SQL Injection

MiCollab 7.0 - SQL Injection ================ Exploit Title: SQL Injection Vulnerability in MiCollab v7.0 Date: 3-22-2016 Vendor Homepage: http://www.mitel.com Vendor: Mitel Software: MiCollab End User Portal Version: v7.0 Advisory:...

[SECURITY] Fedora 23 Update: libotr-4.1.1-1.fc23

Off-the-Record Messaging Library and Toolkit This is a library and toolkit which implements Off-the-Record OTR Messagi ng. OTR allows you to have private conversations over IM by providing Encryptio n, Authentication, Deniability and Perfect forward secrecy...

[SECURITY] Fedora 22 Update: libotr-4.1.1-1.fc22

Off-the-Record Messaging Library and Toolkit This is a library and toolkit which implements Off-the-Record OTR Messagi ng. OTR allows you to have private conversations over IM by providing Encryptio n, Authentication, Deniability and Perfect forward secrecy...

Adobe Connect Web Injection

The vulnerability of the Adobe Connect instant messaging program exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code using request parameters...

Adobe Connect Web Injection

The vulnerability of the Adobe Connect instant messaging program exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code remotely...

USN-2926-1: OTR vulnerability

Markus Vervier discovered that OTR incorrectly handled large incoming messages. A remote attacker could use this issue to cause OTR to crash, resulting in a denial of service, or possibly execute arbitrary code...

libotr Off-the-Record Secure Messaging Security Patch

Users of secure messaging apps such as Pidgin, Adium and others built upon libotr, the Off-the-Record protocol, are being urged to update immediately to current versions after the discovery of a critical flaw that can be used in targeted attacks to expose encrypted communication. The OTR...