87617 matches found
CVE-2026-5299
creationtimestamp| type| source ---|---|--- 2026-05-03 10:37:15+00:00| seen| https://t.me/itarmyofrussianews/379...
Telegram Desktop 安全漏洞
Telegram Desktop is the desktop version of Telegram’s open-source instant messaging mobile application. Versions of Telegram Desktop prior to 6.7.5 contained a security vulnerability. This vulnerability stemmed from the function RequestButton in the Bot API component, specifically the handling of...
PT-2026-36705
Name of the Vulnerable Software and Affected Versions Telegram Desktop versions prior to 6.7.6 Description A null pointer dereference a condition where a program attempts to read from a memory address that is null, typically causing a crash can be triggered remotely in the Bot API component. The...
CVE-2026-7671
creationtimestamp| type| source ---|---|--- 2026-05-02 21:00:04+00:00| seen| Telegram/FLV6t7Va3cw7z9NmSu7nucQbg4vUfz1QpezNhFqmTOM...
Malicious code in common-tg-service (npm)
Malicious npm package published by user shetty123 as part of a Telegram account hijacking framework targeting Indian Telegram users. All 502 published versions 1.0.1 through 1.3.207 are malicious. Pairs with ams-ssk, which provides the operator's server-side AMS/CMS infrastructure...
Malicious code in ams-ssk (npm)
Malicious npm package published by user shetty123 as part of a Telegram account hijacking framework targeting Indian Telegram users. All 31 published versions 1.0.0 through 1.0.33 are malicious. Pairs with common-tg-service, which performs the client-side Telegram account takeover. ams-ssk is the...
MAL-2026-3287 Malicious code in ams-ssk (npm)
Malicious npm package published by user shetty123 as part of a Telegram account hijacking framework targeting Indian Telegram users. All 31 published versions 1.0.0 through 1.0.33 are malicious. Pairs with common-tg-service, which performs the client-side Telegram account takeover. ams-ssk is the...
MAL-2026-3288 Malicious code in common-tg-service (npm)
Malicious npm package published by user shetty123 as part of a Telegram account hijacking framework targeting Indian Telegram users. All 502 published versions 1.0.1 through 1.3.207 are malicious. Pairs with ams-ssk, which provides the operator's server-side AMS/CMS infrastructure...
Exploit for Missing Authentication for Critical Function in Cpanel
CVE-2026-41940 – cPanel/WHM Auth Bypass + Root Password Changer...
Malicious code in pycryptcore (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 3337f9433143a04e30ce5881c7786f787cc882c983ed5e68b22f60fd79f2a0dd Typosquatting package that automatically exfiltrates files to a Telegram channel on importing. --- Category: MALICIOUS - The campaign has clearly malicious...
MAL-2026-3211 Malicious code in pycryptcore (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 3337f9433143a04e30ce5881c7786f787cc882c983ed5e68b22f60fd79f2a0dd Typosquatting package that automatically exfiltrates files to a Telegram channel on importing. --- Category: MALICIOUS - The campaign has clearly malicious...
CVE-2025-69606
creationtimestamp| type| source ---|---|--- 2026-04-30 23:00:10+00:00| seen| Telegram/P45NJHmymloXtZIQDhqedqgrJijkJmCthR1UJzeSteIHM...
CVE-2026-42281
creationtimestamp| type| source ---|---|--- 2026-04-30 21:00:54+00:00| published-proof-of-concept| https://github.com/MagicMirrorOrg/MagicMirror/security/advisories/GHSA-ph6f-2cvq-79hq 2026-05-01 03:00:05+00:00| seen| Telegram/Bh4iyBQIMN2Hl9Jl9GcGtuPw1PskodE0qn4w68HKrpiOc 2026-05-11 16:50:45+00:0...
CVE-2026-42141
creationtimestamp| type| source ---|---|--- 2026-04-30 07:00:11+00:00| seen| Telegram/P5bUU6aFVi3TImC6WDx24HeHf8RVUggO7fw0-2Q4WCtYm0 2026-04-30 07:02:37+00:00| seen| https://t.me/GithubRedTeam/82154 2026-04-30 09:00:04+00:00| seen| Telegram/yjUnQ6hKYXBxzaCr4Cr42UE0MHqi1VzU3UchLczNxtZwAY...
PT-2026-36101
Name of the Vulnerable Software and Affected Versions nanobot affected versions not specified Description An issue exists where including the | character in a sender address allows an attacker to bypass the Channel allowlist. This bypass provides full access to the Agent Loop, exposing all tools,...
CVE-2023-27321
creationtimestamp| type| source ---|---|--- 2026-04-29 15:00:06+00:00| seen| Telegram/n7wRicylc66WfbR0mdLwehKvlM-QwtHoFxwz1W2HjLMRaPw...
CVE-2026-7222
creationtimestamp| type| source ---|---|--- 2026-04-29 11:00:04+00:00| seen| https://t.me/GithubRedTeam/82052...
CVE-2026-38945
creationtimestamp| type| source ---|---|--- 2026-04-29 09:00:04+00:00| seen| https://t.me/GithubRedTeam/82037...