87537 matches found
CVE-2022-43363
Telegram Web 15.3.1 allows XSS via a certain payload derived from a Target Corporation website. NOTE: some third parties have been unable to discern any relationship between the Pastebin information and a possible XSS finding...
CVE-2025-2394
creationtimestamp| type| source ---|---|--- 2025-05-23 00:44:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17368...
GHSA-C72G-53HW-82Q7
creationtimestamp| type| source ---|---|--- 2025-05-22 22:50:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17362...
GHSA-6C48-67XX-VQGC
creationtimestamp| type| source ---|---|--- 2025-05-22 21:38:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17361...
CVE-2021-27351
The Terminate Session feature in the Telegram application through 7.2.1 for Android, and through 2.4.7 for Windows and UNIX, fails to invalidate a recently active session...
CVE-2021-27204
Telegram before 7.4 212543 Stable on macOS stores the local passcode in cleartext, leading to information disclosure...
CVE-2021-30496
The Telegram app 7.6.2 for iOS allows remote authenticated users to cause a denial of service application crash if the victim pastes an attacker-supplied message e.g., in the Persian language into a channel or group. The crash occurs in MtProtoKitFramework. NOTE: the vendor's perspective is that...
CVE-2021-37596
Telegram Web K Alpha 0.6.1 allows XSS via a document name...
CVE-2022-32790
creationtimestamp| type| source ---|---|--- 2025-05-22 19:46:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17353...
CVE-2022-32787
creationtimestamp| type| source ---|---|--- 2025-05-22 19:46:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17352...
RHSA-2024:4716
creationtimestamp| type| source ---|---|--- 2025-05-22 19:46:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17351...
RHSA-2024:4910
creationtimestamp| type| source ---|---|--- 2025-05-22 19:46:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17351...
RHSA-2024:5444
creationtimestamp| type| source ---|---|--- 2025-05-22 19:46:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17351...
RHSA-2024:4955
creationtimestamp| type| source ---|---|--- 2025-05-22 19:46:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17351...
RHSA-2024:4457
creationtimestamp| type| source ---|---|--- 2025-05-22 19:46:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17351...
CVE-2019-6540
creationtimestamp| type| source ---|---|--- 2025-05-22 19:46:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17350...
CVE-2019-6538
creationtimestamp| type| source ---|---|--- 2025-05-22 19:45:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17347...
CVE-2021-36769
A reordering issue exists in Telegram before 7.8.1 for Android, Telegram before 7.8.3 for iOS, and Telegram Desktop before 2.8.8. An attacker can cause the server to receive messages in a different order than they were sent a client...
CVE-2020-25824
Telegram Desktop through 2.4.3 does not require passcode entry upon pushing the Export key within the Export Telegram Data wizard. The threat model is a victim who has voluntarily opened Export Wizard but is then distracted. An attacker then approaches the unattended desktop and pushes the Export...