41 matches found
whatsapp-mitd-mitm
WhatsApp MitD & MitM Introduction This repository contains PoC code and tools that were developed as part of our research 01 on remotely exploiting Man-in-the-Disk MitD vulnerabilities on WhatsApp for Android. As discussed in our blog post, the code and accompanying scripts found here, were used ...
EUVD-2018-18099
Malware in sbrugna...
EUVD-2020-12716
Malware in sbrugna...
EUVD-2019-3590
Malware in sbrugna...
CVE-2021-24035
A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13 and WhatsApp Business for Android v2.21.8.13 could have allowed path traversal attacks that overwrite WhatsApp files...
CVE-2021-24042
The calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior to v2.21.23, WhatsApp for iOS prior to v2.21.230, WhatsApp Business for iOS prior to v2.21.230, WhatsApp for KaiOS prior to v2.2143, WhatsApp Desktop prior to v2.2146 could have allowed an...
CVE-2021-24041
A missing bounds check in image blurring code prior to WhatsApp for Android v2.21.22.7 and WhatsApp Business for Android v2.21.22.7 could have allowed an out-of-bounds write if a user sent a malicious image...
CVE-2021-24041: Heap-based Buffer Overflow
A missing bounds check in image blurring code prior to WhatsApp for Android v2.21.22.7 and WhatsApp Business for Android v2.21.22.7 could have allowed an out-of-bounds write if a user sent a malicious image...
PT-2021-15662
Name of the Vulnerable Software and Affected Versions: WhatsApp for Android versions prior to 2.21.22.7 WhatsApp Business for Android versions prior to 2.21.22.7 Description: A missing bounds check in image blurring code could have allowed an out-of-bounds write if a user sent a malicious image...
Path traversal
A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13 and WhatsApp Business for Android v2.21.8.13 could have allowed path traversal attacks that overwrite WhatsApp files...
CVE-2021-24035
A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13 and WhatsApp Business for Android v2.21.8.13 could have allowed path traversal attacks that overwrite WhatsApp files...
CVE-2021-24035: Relative Path Traversal
A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13 and WhatsApp Business for Android v2.21.8.13 could have allowed path traversal attacks that overwrite WhatsApp files...
PT-2021-15657
Name of the Vulnerable Software and Affected Versions: WhatsApp for Android versions prior to 2.21.8.13 WhatsApp Business for Android versions prior to 2.21.8.13 Description: The issue is related to a lack of filename validation when unzipping archives, which could have allowed path traversal...
CVE-2021-24027: Use of Cache Containing Sensitive Information
A cache configuration issue prior to WhatsApp for Android v2.21.4.18 and WhatsApp Business for Android v2.21.4.18 may have allowed a third party with access to the device’s external storage to read cached TLS material...
CVE-2020-1910: Out-of-bounds Write
A missing bounds check in WhatsApp for Android prior to v2.21.1.13 and WhatsApp Business for Android prior to v2.21.1.13 could have allowed out-of-bounds read and write if a user applied specific image filters to a specially crafted image and sent the resulting image...
CVE-2020-1905
Media ContentProvider URIs used for opening attachments in other apps were generated sequentially prior to WhatsApp for Android v2.20.185, which could have allowed a malicious third party app chosen to open the file to guess the URIs for previously opened attachments until the opener app is...
CVE-2020-1905
CVE-2020-1905 concerns WhatsApp for Android prior to v2.20.185. It describes that Media ContentProvider URIs used to open attachments were generated sequentially, enabling a malicious app chosen to open a file to guess the URI of a previously opened attachment until the opener app is terminated. ...
CVE-2020-1905: Generation of Predictable Numbers or Identifiers
Media ContentProvider URIs used for opening attachments in other apps were generated sequentially prior to WhatsApp for Android v2.20.185, which could have allowed a malicious third party app chosen to open the file to guess the URIs for previously opened attachments until the opener app is...
CVE-2020-1902: Exposure of Sensitive Information to an Unauthorized Actor
A user running a quick search on a highly forwarded message on WhatsApp for Android from v2.20.108 to v2.20.140 or WhatsApp Business for Android from v2.20.35 to v2.20.49 could have been sent to the Google service over plain HTTP...
CVE-2020-1907: Out-of-bounds Write
A stack overflow in WhatsApp for Android prior to v2.20.196.16, WhatsApp Business for Android prior to v2.20.196.12, WhatsApp for iOS prior to v2.20.90, WhatsApp Business for iOS prior to v2.20.90, and WhatsApp for Portal prior to v173.0.0.29.505 could have allowed arbitrary code execution when...