Beware of Windows/MacOS/Linux Virus Spreading Through Facebook Messenger

If you came across any Facebook message with a video link sent by anyone, even your friend — just don’t click on it. Security researchers at Kaspersky Lab have spotted an ongoing cross-platform campaign on Facebook Messenger, where users receive a video link that redirects them to a fake website,...

IP Messenger for Win Untrustworthy Search Path Vulnerability

IP Messenger for Win is a suite of instant messaging software for LANs based on the Windows platform.Install is one of the installation programs. An untrusted search path vulnerability exists in the installer in IP Messenger for Win versions 4.60 and earlier. A remote attacker can exploit this...

Design/Logic Flaw

Untrusted search path vulnerability in Installer of IP Messenger for Win 4.60 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-10820

Untrusted search path vulnerability in Installer of IP Messenger for Win 4.60 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-10820

Untrusted search path vulnerability in Installer of IP Messenger for Win 4.60 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-10820

The CVE-2017-10820 issue affects IP Messenger for Win 4.60 and earlier, where the installer contains an untrusted DLL search path vulnerability (CWE-427). This can allow a Trojan horse DLL placed in an untrusted directory to be loaded, enabling arbitrary code execution with the privileges of the ...

CVE-2017-10820

Untrusted search path vulnerability in Installer of IP Messenger for Win 4.60 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Installer of IP Messenger may insecurely load Dynamic Link Libraries

Overview IP Messenger is a LAN Messenger based on TCP/IP. IP Messenger contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili Masami of Tachibana Lab. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

JVN#86724730: Installer of IP Messenger may insecurely load Dynamic Link Libraries

IP Messenger is a LAN Messenger based on TCP/IP. IP Messenger contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the installer. Solution Use the latest...

Mood Messenger - SMS & MMS - Base64 encoded String, Exported ContentProvider, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Mood Messenger - SMS & MMS published at the 'play' market has multiple vulnerabilities...

WhatsApp Messenger - Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application WhatsApp Messenger published at the 'play' market has multiple vulnerabilities...

Viber Messenger - Customized SSL, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Viber Messenger published at the 'play' market has multiple vulnerabilities...

Debian: Security Advisory (DSA-3902-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

messenger-education.org XSS vulnerability

Vulnerable URL: http://www.messenger-education.org/teachers/bio.php?fellow=1"...

classifieds.thenews-messenger.com XSS vulnerability

Vulnerable URL: http://classifieds.thenews-messenger.com/category.php?place=Pets=1/-///'/"//--...

My first working week with Opera Reborn

So, last Monday I changed my Chrome to the new Opera. It was an experiment to feel how is it “really” different from Chrome. I should mention before writing this post two important things about my background: 1. I was an Opera user since 2003 to 2010 and then moved to Chrome because of the many...

Pidgin: Arbitrary code execution

Background Pidgin is a GTK Instant Messenger client for a variety of instant messaging protocols. Description Joseph Bisch discovered that Pidgin incorrectly handled certain xml messages. Impact A remote attacker could send a specially crafted instant message, possibly resulting in execution of...

Signal Private Messenger - Dangerous filesystem permissions, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application Signal Private Messenger published at the 'play' market has multiple vulnerabilities...

Messenger - Customized SSL, Exported ContentProvider, Exported components with free access vulnerabilities

HackApp vulnerability scanner discovered that application Messenger published at the 'play' market has multiple vulnerabilities...

CVE-2017-8769

Facebook WhatsApp Messenger before 2.16.323 for Android uses the SD card for cleartext storage of files Audio, Documents, Images, Video, and Voice Notes associated with a chat, even after that chat is deleted. There may be users who expect file deletion to occur upon chat deletion, or who expect...