WhatsApp Desktop < 0.3.9309 Persistent Cross-Site Scripting (CVE-2019-18426)

The version of WhatsApp Desktop installed on the remote Windows host is prior to 0.3.9309. It is, therefore, affected by a persistent cross-site scripting vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

WhatsApp Desktop 0.3.9308 Cross Site Scripting

Title: WhatsApp Desktop 0.3.9308 - Persistent Cross-Site Scripting Date: 2020-01-21 Exploit Author: Gal Weizman Vendor Homepage: https://www.whatsapp.com Software Link: https://web.whatsapp.com/desktop/windows/release/x64/WhatsAppSetup.exe Software Link:...

WhatsApp Desktop 0.3.9308 - Persistent Cross-Site Scripting

Title: WhatsApp Desktop 0.3.9308 - Persistent Cross-Site Scripting Date: 2020-01-21 Exploit Author: Gal Weizman Vendor Homepage: https://www.whatsapp.com Software Link: https://web.whatsapp.com/desktop/windows/release/x64/WhatsAppSetup.exe Software Link:...

Exploit for Cross-site Scripting in Whatsapp

WhatsApp Vulnerabilities Disclosure - Open Redirect + CSP Byp...

WhatsApp Bug Allows Malicious Code-Injection, One-Click RCE

Security researchers have identified a JavaScript vulnerability in the WhatsApp desktop platform that could allow cybercriminals to spread malware, phishing or ransomware campaigns through notification messages that appear completely normal to unsuspecting users. And, further investigation shows...

CVE-2019-18426

creationtimestamp| type| source ---|---|--- 2020-02-04 21:30:02+00:00| seen| https://t.me/thehackernews/592 2020-02-04 23:18:44+00:00| seen| https://t.me/antichat/7809 2020-02-05 17:54:24+00:00| published-proof-of-concept| https://t.me/alexmakus/3268 2020-02-06 19:23:37+00:00|...

CVE-2019-18426

A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10 allows cross-site scripting and local file reading. Exploiting the vulnerability requires the victim to click a link preview from a specially crafted text message...

CVE-2019-18426

CVE-2019-18426 affects WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone prior to 2.20.10. The vulnerability is a cross-site scripting flaw that can lead to local file reading; exploitation requires the victim to click a link preview from a specially crafted text me...