Information disclosure

An exploitable information disclosure vulnerability exists in the "Secret Chats" functionality of the Telegram Android messaging application version 4.9.0. The "Secret Chats" functionality allows a user to delete all traces of a chat, either by using a time trigger or by direct request. There is ...

CVE-2018-3986

An exploitable information disclosure vulnerability exists in the "Secret Chats" functionality of the Telegram Android messaging application version 4.9.0. The "Secret Chats" functionality allows a user to delete all traces of a chat, either by using a time trigger or by direct request. There is ...

CVE-2018-3986: Exposure of Sensitive Information to an Unauthorized Actor

An exploitable information disclosure vulnerability exists in the "Secret Chats" functionality of the Telegram Android messaging application version 4.9.0. The "Secret Chats" functionality allows a user to delete all traces of a chat, either by using a time trigger or by direct request. There is ...

PT-2019-10741 · Telegram · Telegram Android

Name of the Vulnerable Software and Affected Versions: Telegram Android messaging application version 4.9.0 Description: An information disclosure issue exists in the "Secret Chats" functionality, which allows users to delete chat traces. However, a bug leaves behind photos taken and shared in...

Telegram Messaging Application for Android Information Disclosure Vulnerability

Telegram Messaging Application for Android is an instant messaging application based on the Android platform. An information disclosure vulnerability exists in the 'Secret Chats' feature in version 4.9.0 of the Telegram Messaging Application for Android, which stems from the program's inability t...

PT-2018-15375 · Telegram · Telegram

Name of the Vulnerable Software and Affected Versions: Telegram version 4.9.1 Telegram Web-version 0.7.0 Description: The issue concerns a side channel in the "secret chat" feature where Telegram servers send GET requests for URLs typed while composing a chat message, before the message is sent...

CVE-2018-20436: Server-Side Request Forgery (SSRF)

The "secret chat" feature in Telegram 4.9.1 for Android has a "side channel" in which Telegram servers send GET requests for URLs typed while composing a chat message, before that chat message is sent. There are also GET requests to other URLs on the same web server. This also affects one or more...

Telegram Android Secret Chats Information Disclosure Vulnerability

Summary An exploitable information disclosure vulnerability exists in the “Secret Chats” functionality of the Telegram Android messaging application version 4.9.0. The “Secret Chats” functionality allows a user to delete all traces of a chat, either by using a time trigger or by direct request...

New WhatsApp flaws let attackers hack chats to spread fake news

By Waqas Spreading fake news through WhatsApp was never so easy before. According to the latest research from Check Point security firm, WhatsApp users are at the risk of getting their private chats and group conversations hacked and exploited. Researchers discovered a new wave of attacks that...

Activist Leaks 11,000 Private Messages from WikiLeaks' Twitter Chats

An activist has just leaked thousands of private messages of an organization that's been known to publishing others' secrets. More than 11,000 direct messages from a Twitter group used by WikiLeaks and around 10 close supporters have been posted online by journalist and activist Emma Best, exposi...

Activist Leaks 11,000 Private Messages from WikiLeaks' Twitter Chats

An activist has just leaked thousands of private messages of an organization that's been known to publishing others' secrets. More than 11,000 direct messages from a Twitter group used by WikiLeaks and around 10 close supporters have been posted online by journalist and activist Emma Best, exposi...

TeleGrab Malware Steals Telegram Desktop Messaging Sessions, Steam Credentials

Recently discovered malware steals cache data and secure messaging sessions from the desktop version of encrypted messaging service Telegram. The malware, dubbed TeleGrab, leverages weak default settings in the design of Telegram’s desktop version along with the desktop’s lack of support for Secr...

Another severe flaw in Signal desktop app lets hackers steal your chats in plaintext

For the second time in less than a week, users of the popular end-to-end encrypted Signal messaging app have to update their desktop applications once again to patch another severe code injection vulnerability. Discovered Monday by the same team of security researchers, the newly discovered...

Another severe flaw in Signal desktop app lets hackers steal your chats in plaintext

For the second time in less than a week, users of the popular end-to-end encrypted Signal messaging app have to update their desktop applications once again to patch another severe code injection vulnerability. Discovered Monday by the same team of security researchers, the newly discovered...

National Consumer Protection Week

March 4–10 is National Consumer Protection Week NCPW, an event to encourage people and businesses to learn more about avoiding scams and understanding consumer rights. During NCPW, the Federal Trade Commission FTC and its partners highlight free resources to help protect consumers. NCCIC/US-CERT...

January 12, 2017 – Morning Cyber Coffee Headlines – “Martin Luther King Jr.” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! January 12, 2018 - Headlines Carbon Black in the News: Intel CEO releases...

WhatsApp Vulnerability Lets Anyone Spy on Group Chats

By Waqas A critical vulnerability in WhatsApp has been discovered that lets This is a post from HackRead.com Read the original post: WhatsApp Vulnerability Lets Anyone Spy on Group Chats...

Pre-installed Trojan in Cheap Android Devices Steal Data, Intercept Chats

By Waqas Android devices are one of the most vulnerable mobile OS This is a post from HackRead.com Read the original post: Pre-installed Trojan in Cheap Android Devices Steal Data, Intercept Chats...

PT-2017-18515 · Facebook · Whatsapp Messenger

Name of the Vulnerable Software and Affected Versions: Facebook WhatsApp Messenger versions prior to 2.16.323 for Android Description: The application stores files associated with a chat, such as Audio, Documents, Images, Video, and Voice Notes, in cleartext on the SD card, even after the chat is...

Uber: SAML Authentication Bypass on uchat.uberinternal.com

Due to improper SAML verification it was possible to bypass the OneLogin authentication on https://uchat.uberinternal.com and gain unauthorized access to internal chats. We enjoyed working with @mishre on this report and look forward to receiving more submissions from them in the future!...