Messenger - Customized SSL, Exported ContentProvider, Exported components with free access vulnerabilities

HackApp vulnerability scanner discovered that application Messenger published at the 'play' market has multiple vulnerabilities...

CVE-2017-8769

Facebook WhatsApp Messenger before 2.16.323 for Android uses the SD card for cleartext storage of files Audio, Documents, Images, Video, and Voice Notes associated with a chat, even after that chat is deleted. There may be users who expect file deletion to occur upon chat deletion, or who expect...

Arbitrary file deletion

DISPUTED Facebook WhatsApp Messenger before 2.16.323 for Android uses the SD card for cleartext storage of files Audio, Documents, Images, Video, and Voice Notes associated with a chat, even after that chat is deleted. There may be users who expect file deletion to occur upon chat deletion, or wh...

CVE-2017-8769

Facebook WhatsApp Messenger for Android prior to 2.16.323 stores files associated with chats (Audio, Documents, Images, Video, Voice Notes) on the SD card in cleartext, and this persists after the chat is deleted. The root cause described is that files are kept in cleartext on external storage de...

CVE-2017-8769

Facebook WhatsApp Messenger before 2.16.323 for Android uses the SD card for cleartext storage of files Audio, Documents, Images, Video, and Voice Notes associated with a chat, even after that chat is deleted. There may be users who expect file deletion to occur upon chat deletion, or who expect...

VIPole Private Messenger - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application VIPole Private Messenger published at the 'play' market has multiple vulnerabilities...

Remote Code Execution (RCE)

flex-messenger-core is vulnerable to remote code execution RCE. The AMF3 deserializers in the library allows the instantiation of arbitrary classes via parameter-less java beans constructors. This allows a malicious user to send a malicious AMF3 object to the system to execute arbitrary code...

Chimein.mozilla.org Cross Site Scripting

Exploit Title: Mozilla.org sub-domain Stored-XSS - Reflected-XSS - HTTP Response Splitting Date: 03/04/2017 Author: Yann CAM @ Synetis - ASafety Vendor or Software Link: www.mozilla.org Version: / Category: Stored Cross Site Scripting / Reflected Cross Site Scripting / HTTP Response Splitting...

Design/Logic Flaw

An issue was discovered in Telegram Messenger 2.6 for iOS and 1.8.2 for Android. Secret chat messages are available in cleartext in process memory and a .db file...

CVE-2014-8688

An issue was discovered in Telegram Messenger 2.6 for iOS and 1.8.2 for Android. Secret chat messages are available in cleartext in process memory and a .db file...

CVE-2014-8688

An issue was discovered in Telegram Messenger 2.6 for iOS and 1.8.2 for Android. Secret chat messages are available in cleartext in process memory and a .db file...

CVE-2014-8688

Telegram Messenger for iOS (2.6) and Android (1.8.2) is affected by an information-disclosure vulnerability where secret chat messages are stored in cleartext in process memory and in a .db file. The root cause is not detailed beyond the messages being accessible in plaintext within memory and st...

[SECURITY] Fedora 24 Update: kopete-16.12.2-2.fc24

Instant messenger...

[SECURITY] Fedora 25 Update: kopete-16.12.2-2.fc25

Instant messenger...

Chattr Messenger - Dynamic Code Loading, Exported ContentProvider, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Chattr Messenger published at the 'play' market has multiple vulnerabilities...

Ace Messenger - Free SMS & MMS - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Ace Messenger - Free SMS & MMS published at the 'play' market has multiple vulnerabilities...

Messenger - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Messenger published at the 'play' market has multiple vulnerabilities...

Messenger - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Messenger published at the 'play' market has multiple vulnerabilities...

SMS MMS Messenger - ContentProvider mode not defined, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application SMS MMS Messenger published at the 'play' market has multiple vulnerabilities...

Fusion Messenger - Dangerous filesystem permissions, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Fusion Messenger published at the 'play' market has multiple vulnerabilities...