The vulnerability of the sdp_media_set_lattr() function in the Wire Secure Messenger application, related to the use of uncontrolled format strings, allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the sdpmediasetlattr function in the Wire Secure Messenger messaging application is related to the use of uncontrolled format strings. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause service failures...

Session 授权问题漏洞

Session is a new type of encrypted private messenger open-sourced by Oxen. A security vulnerability exists in Session version 1.13.0. An attacker exploited the vulnerability to bypass an application's password or passcode lock to access user data...

Facebook Phishing Scam: Crooks Using Messenger Chatbots to Steal Login Data

By Waqas The new phishing scam uses malicious and fake chatbots to steal login credentials of unsuspected Facebook users through… This is a post from HackRead.com Read the original post: Facebook Phishing Scam: Crooks Using Messenger Chatbots to Steal Login Data...

Malicious code in ok-messenger-emoji (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04de26831924657f1e3bb1783bac5174d96a3e54b4a2297537f17aa065439f66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5047 Malicious code in ok-messenger-emoji (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04de26831924657f1e3bb1783bac5174d96a3e54b4a2297537f17aa065439f66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ok-messenger-model (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7bcdfc9b070b703c4308d68ecabf68a9973d878d832021df11f5fd788327178 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5048 Malicious code in ok-messenger-model (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7bcdfc9b070b703c4308d68ecabf68a9973d878d832021df11f5fd788327178 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @fbsystem/figma-messenger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71addafc4195bb495c6b65e56d535eb02c90e7fdc06b56a35ca98d98555c644a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-268 Malicious code in @fbsystem/figma-messenger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71addafc4195bb495c6b65e56d535eb02c90e7fdc06b56a35ca98d98555c644a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Facebook Messenger Scam Duped Millions

For months now, millions of Facebook users have been duped by the same phishing scam that cons users into handing over their account credentials. According to a report outlining the phishing campaign, the scam is still active and continues to push victims to a fake Facebook login page where victi...

CVE-2022-24004

A Stored Cross-Site Scripting XSS vulnerability was discovered in Messenger/messengerajax.php in REDCap 12.0.11. This issue allows any authenticated user to inject arbitrary code into the messenger title aka newtitle field when editing an existing conversation. The payload executes in the browser...

CVE-2022-24004

A Stored Cross-Site Scripting XSS vulnerability was discovered in Messenger/messengerajax.php in REDCap 12.0.11. This issue allows any authenticated user to inject arbitrary code into the messenger title aka newtitle field when editing an existing conversation. The payload executes in the browser...

CVE-2022-24004

A Stored Cross-Site Scripting XSS vulnerability was discovered in Messenger/messengerajax.php in REDCap 12.0.11. This issue allows any authenticated user to inject arbitrary code into the messenger title aka newtitle field when editing an existing conversation. The payload executes in the browser...

Cross site scripting

A Stored Cross-Site Scripting XSS vulnerability was discovered in Messenger/messengerajax.php in REDCap 12.0.11. This issue allows any authenticated user to inject arbitrary code into the messenger title aka newtitle field when editing an existing conversation. The payload executes in the browser...

CVE-2022-24004

CVE-2022-24004 pertains to a Stored XSS in REDCap 12.0.11 affecting Messenger/messenger_ajax.php. The vulnerability allows any authenticated user editing an existing conversation to inject arbitrary code into the messenger title (new_title) field, with the payload then executing in the browsers o...

REDCap 跨站脚本漏洞

REDCap is a data collection and management web application. A security vulnerability exists in REDCap version 12.0.11, which stems from a stored cross-site scripting XSS issue in ProjectGeneral/editprojectsettings.php. An authenticated, remote attacker can exploit this vulnerability to inject...

REDCap 跨站脚本漏洞

REDCap is a data collection and management web application. A security vulnerability exists in REDCap version 12.0.11, which stems from a stored cross-site scripting XSS issue in Messenger/messengerajax.php. An authenticated, remote attacker can exploit this vulnerability to inject arbitrary...

Facebook users targeted in massive phishing campaign

Facebook is once again the launchpad for a large-scale phishing campaign, according to researchers at PIXM. The campaign, which first shows signs of life back in September 2021, has generated millions of page views and ad referral revenue "estimated to be millions of USD at this scale of...

Telegram Shared Personal User Data With German Authorities

By Deeba Ahmed The popular messenger app has transferred the data of its users to the German Federal Criminal Police Office.… This is a post from HackRead.com Read the original post: Telegram Shared Personal User Data With German Authorities...

CVE-2022-28218

An issue was discovered in CipherMail Webmail Messenger 1.1.1 through 4.1.4. A local attacker could access secret keys found in a Roundcube configuration file that are used to protect Webmail user passwords and two-factor authentication 2FA...