655 matches found
SUSE CVE-2026-54638
gotd/td is a T Telegram MTProto API client in Go. Prior to 0.145.1, proto.UnencryptedMessage.Decode in proto/unencryptedmessage.go read attacker controlled dataLen from an unauthenticated MTProto unencrypted packet and allocated makebyte, dataLen before checking the remaining buffer, allowing...
CVE-2010-4652
creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:45+00:00| seen| Telegram/1X2BtYwWHdXS2SnlXJZaW1RwfVI6Gbba0wN-buSHmDE0A 2026-07-30 00:02:02+00:00| seen| Telegram/1X2BtYwWHdXS2SnlXJZaW1RwfVI6Gbba0wN-buSHmDE0A 2026-08-01 14:00:05+00:00| seen|...
CVE-2014-6318
creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:28+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-07-30 00:01:55+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-08-01 11:00:04+00:00| seen|...
CVE-2015-1720
creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:27+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-07-30 00:01:54+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-08-01 11:00:04+00:00| seen|...
CVE-2014-2780
creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:20+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-07-30 00:01:51+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-08-01 11:00:10+00:00| seen|...
CVE-2014-0300
creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:17+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-07-30 00:01:51+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-08-01 11:00:11+00:00| seen|...
CVE-2015-2513
creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:16+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-07-30 00:01:50+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-08-01 11:00:12+00:00| seen|...
CVE-2016-3287
creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:12+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-07-30 00:01:49+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-08-01 11:00:15+00:00| seen|...
CVE-2017-00016
creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:11+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-07-29 12:01:44+00:00| seen| Telegram/3o-h5cDuBYvelD8IPLIQsgk8AzK13R9y0BVXvuLlzHxwHw 2026-07-30 00:01:48+00:00| seen|...
CVE-2026-54638
gotd/td is a T Telegram MTProto API client in Go. Prior to 0.145.1, proto.UnencryptedMessage.Decode in proto/unencryptedmessage.go read attacker controlled dataLen from an unauthenticated MTProto unencrypted packet and allocated makebyte, dataLen before checking the remaining buffer, allowing...
CVE-2026-54638 td has pre-auth denial of service via unbounded memory allocation in proto.UnencryptedMessage.Decode
gotd/td is a T Telegram MTProto API client in Go. Prior to 0.145.1, proto.UnencryptedMessage.Decode in proto/unencryptedmessage.go read attacker controlled dataLen from an unauthenticated MTProto unencrypted packet and allocated makebyte, dataLen before checking the remaining buffer, allowing...
CVE-2026-54638
gotd/td is a T Telegram MTProto API client in Go. Prior to 0.145.1, proto.UnencryptedMessage.Decode in proto/unencryptedmessage.go read attacker controlled dataLen from an unauthenticated MTProto unencrypted packet and allocated makebyte, dataLen before checking the remaining buffer, allowing...
Malicious code in hash-utils-py (PyPI)
Source: kam193 4177b7c46ecbfa35116b35a2a491107d0514cd6551a447b7213ef6e097172939 During importing the module, the code attempts to exfiltrate sensitive Telegram's client session files. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...
CVE-2026-40897
creationtimestamp| type| source ---|---|--- 2026-04-24 19:22:45+00:00| seen| Telegram/6Kzjgs5Jm1YsIV5W18stSaCNyR3ZbpfLU45htDdv-YDitI 2026-04-29 05:40:29+00:00| seen| https://gist.github.com/alon710/25629451db7d7ca933d6d9a4e21d4536 2026-05-07 09:00:04+00:00| seen|...
CVE-2025-43187
creationtimestamp| type| source ---|---|--- 2026-04-02 22:19:09+00:00| seen| Telegram/t8lhBZO3-bZ9TFsvX2iDt2pY-voUNRZC7A74h2p8is6Io 2026-04-02 22:19:32+00:00| seen| Telegram/twQJKlobqCRh9RL5tSZmpMuaBSUEPIk0d1syiBwJwFL7d0...
CVE-2025-24229
creationtimestamp| type| source ---|---|--- 2026-04-02 22:14:33+00:00| seen| Telegram/2E5zGnFDFPvCqW-8Fv5TCu3RrGIbsxTzgaNWgYN4u84o0k...
CVE-2026-24382
creationtimestamp| type| source ---|---|--- 2026-03-26 21:34:08+00:00| seen| Telegram/xJezgFr2WDWEMFIRLHcqUi9P6zOwR7kCz2QloATB-ENA7I...
CVE-2026-22506
creationtimestamp| type| source ---|---|--- 2026-03-26 21:33:13+00:00| seen| Telegram/5Bb0qK301Op7Yhojb7YEduqeLGlpAUlFeXZf97xc-7ChehU...
Malicious code in hash-utils-py (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 4177b7c46ecbfa35116b35a2a491107d0514cd6551a447b7213ef6e097172939 During importing the module, the code attempts to exfiltrate sensitive Telegram's client session files. --- Category: MALICIOUS - The campaign has clearly...