110 matches found
CVE-2020-17448
Telegram Desktop through 2.1.13 allows a spoofed file type to bypass the Dangerous File Type Execution protection mechanism, as demonstrated by use of the chat window with a filename that lacks an extension...
CVE-2020-17448
Telegram Desktop through 2.1.13 allows a spoofed file type to bypass the Dangerous File Type Execution protection mechanism, as demonstrated by use of the chat window with a filename that lacks an extension...
Type confusion
Telegram Desktop through 2.1.13 allows a spoofed file type to bypass the Dangerous File Type Execution protection mechanism, as demonstrated by use of the chat window with a filename that lacks an extension...
UBUNTU-CVE-2020-17448
Telegram Desktop through 2.1.13 allows a spoofed file type to bypass the Dangerous File Type Execution protection mechanism, as demonstrated by use of the chat window with a filename that lacks an extension...
CVE-2020-17448
Telegram Desktop through 2.1.13 allows a spoofed file type to bypass the Dangerous File Type Execution protection mechanism, as demonstrated by use of the chat window with a filename that lacks an extension...
CVE-2020-17448
Telegram Desktop through 2.1.13 allows a spoofed file type to bypass the Dangerous File Type Execution protection mechanism, as demonstrated by use of the chat window with a filename that lacks an extension...
Bypassing MassLogger Anti-Analysis — a Man-in-the-Middle Approach
The FireEye Front Line Applied Research & Expertise FLARE Team attempts to always stay on top of the most current and emerging threats. As a member of the FLARE Reverse Engineer team, I recently received a request to analyze a fairly new credential stealer identified as MassLogger. Despite the la...
Telegram Input Verification Error Vulnerability
Telegram is an instant messaging mobile application.Telegram Desktop is the desktop version of Telegram. An input validation error vulnerability exists in Telegram Desktop version 2.0.1 and earlier and Telegram Android and IOS version 6.0.1 and earlier, which can be exploited by remote attackers ...
DEBIAN-CVE-2020-12474
Telegram Desktop through 2.0.1, Telegram through 6.0.1 for Android, and Telegram through 6.0.1 for iOS allow an IDN Homograph attack via Punycode in a public URL or a group chat invitation URL...
UBUNTU-CVE-2020-12474
Telegram Desktop through 2.0.1, Telegram through 6.0.1 for Android, and Telegram through 6.0.1 for iOS allow an IDN Homograph attack via Punycode in a public URL or a group chat invitation URL...
UBUNTU-CVE-2019-10044
Telegram Desktop before 1.5.12 on Windows, and the Telegram applications for Android, iOS, and Linux, is vulnerable to an IDN homograph attack when displaying messages containing URLs. This occurs because the application produces a clickable link even if for example Latin and Cyrillic characters...
CVE-2019-10044
CVE-2019-10044 affects Telegram Desktop before 1.5.12 on Windows and Telegram apps for Android, iOS, and Linux. The vulnerability is an IDN homograph issue where clickable links are produced for URLs that may mix Latin and Cyrillic characters in the same domain, aided by a font with identical gly...
Telegram Desktop 1.3.14 Information Disclosure Vulnerability - Windows
Telegram Desktop is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Telegram Desktop Detection (Windows SMB Login)
SMB login and WMI file search based detection of Telegram Desktop. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Telegram and Telegram Desktop for Windows Information Disclosure Vulnerability
Telegram for Windows is a suite of mobile messaging tools based on the Windows platform.Telegram Desktop aka tdesktop is its desktop application. An information disclosure vulnerability exists in Telegram Desktop version 1.3.14 and Telegram version 3.3.0.0 WP8.1 for Windows, which can be exploite...
Telegram Desktop Information Disclosure Vulnerability (CNVD-2018-20542)
Telegram is a suite of mobile messaging tools. Telegram Desktop aka tdesktop is its desktop application. A security vulnerability exists in Telegram Desktop version 1.3.16 alpha, which is caused by the program using the SOCKS5 protocol to transfer credentials and application data in clear text wh...
DEBIAN-CVE-2018-17780
Telegram Desktop aka tdesktop 1.3.14, and Telegram 3.3.0.0 WP8.1 on Windows, leaks end-user public and private IP addresses during a call because of an unsafe default behavior in which P2P connections are accepted from clients outside of the My Contacts list...
UBUNTU-CVE-2018-17780
Telegram Desktop aka tdesktop 1.3.14, and Telegram 3.3.0.0 WP8.1 on Windows, leaks end-user public and private IP addresses during a call because of an unsafe default behavior in which P2P connections are accepted from clients outside of the My Contacts list...
PT-2018-14191 · Telegram +1 · Telegram +2
Name of the Vulnerable Software and Affected Versions: Telegram Desktop aka tdesktop version 1.3.14 Telegram version 3.3.0.0 WP8.1 on Windows Description: The issue allows the leakage of end-user public and private IP addresses during a call due to an unsafe default behavior. This behavior involv...