Heap overflow

A heap corruption in WhatsApp can be caused by a malformed RTP packet being sent after a call is established. The vulnerability can be used to cause denial of service. It affects WhatsApp for Android prior to v2.18.293, WhatsApp for iOS prior to v2.18.93, and WhatsApp for Windows Phone prior to...

CVE-2018-6344

A heap corruption in WhatsApp can be caused by a malformed RTP packet being sent after a call is established. The vulnerability can be used to cause denial of service. It affects WhatsApp for Android prior to v2.18.293, WhatsApp for iOS prior to v2.18.93, and WhatsApp for Windows Phone prior to...

CVE-2018-6344

A heap corruption in WhatsApp can be caused by a malformed RTP packet being sent after a call is established. The vulnerability can be used to cause denial of service. It affects WhatsApp for Android prior to v2.18.293, WhatsApp for iOS prior to v2.18.93, and WhatsApp for Windows Phone prior to...

CVE-2018-6344

A heap corruption in WhatsApp can be caused by a malformed RTP packet being sent after a call is established. The vulnerability can be used to cause denial of service. It affects WhatsApp for Android prior to v2.18.293, WhatsApp for iOS prior to v2.18.93, and WhatsApp for Windows Phone prior to...

CVE-2018-6344

CVE-2018-6344 is a heap corruption vulnerability in WhatsApp triggered by malformed RTP packets after a call is established, leading to denial of service. The issue was demonstrated through Project Zero fuzzing of WhatsApp video conferencing (which uses PJSIP/libsrtp, not WebRTC) and was reproduc...

PT-2018-17492 · Whatsapp · Whatsapp For Ios +2

Name of the Vulnerable Software and Affected Versions: WhatsApp for Android versions prior to 2.18.293 WhatsApp for iOS versions prior to 2.18.93 WhatsApp for Windows Phone versions prior to 2.18.172 Description: A heap corruption issue can occur in WhatsApp due to a malformed RTP packet being se...

CVE-2018-6344: Heap-based Buffer Overflow

A heap corruption in WhatsApp can be caused by a malformed RTP packet being sent after a call is established. The vulnerability can be used to cause denial of service. It affects WhatsApp for Android prior to v2.18.293, WhatsApp for iOS prior to v2.18.93, and WhatsApp for Windows Phone prior to...

PT-2018-14191 · Telegram +1 · Telegram +2

Name of the Vulnerable Software and Affected Versions: Telegram Desktop aka tdesktop version 1.3.14 Telegram version 3.3.0.0 WP8.1 on Windows Description: The issue allows the leakage of end-user public and private IP addresses during a call due to an unsafe default behavior. This behavior involv...

Uber: The Microsoft Store Uber App Does Not Implement Certificate Pinning

Summary The Microsoft Store Uber App Windows Phone Architecture does not properly implement certificate pinning. Security Impact Layer-2+ network traffic transmitted from and received by the app can be surreptitiously intercepted and transparently modified by an attacker, with no warnings or erro...

Secure Mail for Windows unable to connect to the backend exchange server.

Secure Mail for WindowsPhone does not work when entering Credentials the App states "Access to your company network is not currently available" Android and iOS devices are working fine and are able to connect to Secure Mail. Direct native mail clients are accessible...

Coinbase: No authorization required in Windows phone web-application

Hey, this is Ahsan Tahir! I've found a authorization issue in coinbase! :- Issue ======= When we login to coinbase using PC not authorized it asks for authorization using a link, which is sent to our email and we have to authorize it by clicking on that email; but, when we login to a windows phon...

Viber adds End-to-End Encryption and PIN protected Hidden Chats features

In Brief Viber, the popular mobile messaging app announced Tuesday that it has added full end-to-end encryption for video, voice and text message services for its millions of users. Here, the end-to-end encryption means only you and the person you are communicating with can read the content, and...

How to Root Windows Phone and Unlock the Bootloader to Install Custom ROMs

Yes, Now it is possible to unlock a Windows Lumia Phone for Root Access and run custom ROMs. Both Microsoft as well as Nokia have made Windows Lumia smartphones difficult to break into at a low-level by locking down their bootloaders, but a software hacker, who go by the name HeathCliff, has just...

(0Day) (Mobile Pwn2Own) Microsoft Internet Explorer CTableLayout::AddRow Out-Of-Bounds Memory Access Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer, including on Windows Phone. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The...

Eisbär SCADA (All Versions) - Persistent UI Vulnerability

Document Title: =============== Eisbär SCADA All Versions - Persistent UI Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1456 Release Date: ============= 2015-05-19 Vulnerability Laboratory ID VL-ID: ==================================== 14...

Insecure management of login credentials in PicsArt Photo Studio for Android [STIC-2014-0426]

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Fundacion Dr. Manuel Sadosky - Programa STIC Advisory http://www.fundacionsadosky.org.ar Insecure management of login credentials in PicsArt Photo Studio for Android 1. Advisory Information Title: Insecure management of login credentials in PicsArt...

Windows Phone 8.1 Hacked

Do you wanna hack Nokia Lumia phone running the latest mobile operating system Windows 8.1 ?? Hackers have made it very easy for you all..!! Just few weeks after Microsoft announced a 19 year-old critical security hole existed in almost every version of its Windows operating system, XDA-developer...

WP8. 1 system vulnerabilities or be exploited by hackers to achieve jailbreak-vulnerability warning-the black bar safety net

Then the perfect system, Certainly there are vulnerabilities that could be exploited by hackers to. Windows Phone 8.1 has been released for some time, although it did not have Android and iOS as popular, but this does not prevent the hackers were looking for the presence in its internal...

Windows Phone Sandbox Holds Up at Mobile Pwn2Own

The Mobile Pwn2Own hacking contest ended today as did the PacSec Applied Security Conference in Tokyo with hackers unable to gain complete control over a Windows Phone and the latest version of the Android mobile OS. Contest sponsors HP said two competitors, Nico Joly and Juri Aedla, were able to...

Microsoft issues Emergency Windows Update to Block Fake SSL Certificates

Today, Microsoft has issued an emergency update for almost all versions of Windows and also for Microsoft devices running Windows Phone 8 and 8.1 to secure users from attacks that abuse the latest issued rogue SSL certificates, which could be used to impersonate Google and Yahoo! websites. A week...