41 matches found
whatsapp-mitd-mitm
WhatsApp MitD & MitM 简介 此仓库包含作为我们研究01一部分开发的PoC代码和工具，旨在远程利用Android版WhatsApp的 磁盘中间人 （MitD）漏洞。正如在我们的博客文章中讨论的，这里提供的代码和附带脚本被用于利用CVE-2020-6516（Chrome）02和CVE-2021-24027（WhatsApp）03。 此仓库的结构如下： 当前目录包含使用Frida钩住WhatsApp、发送携带CORS绕过载荷的钓鱼消息并运行HTTP服务器的Python工具，来自受害者设备的被窃取会话文件将被发送到该服务器。 tls12pskextract/ 包含TLS v1...
EUVD-2018-18099
Malware in sbrugna...
EUVD-2019-3590
Malware in sbrugna...
EUVD-2020-12716
Malware in sbrugna...
CVE-2021-24035
A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13 and WhatsApp Business for Android v2.21.8.13 could have allowed path traversal attacks that overwrite WhatsApp files...
CVE-2021-24042
The calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior to v2.21.23, WhatsApp for iOS prior to v2.21.230, WhatsApp Business for iOS prior to v2.21.230, WhatsApp for KaiOS prior to v2.2143, WhatsApp Desktop prior to v2.2146 could have allowed an...
CVE-2021-24041
A missing bounds check in image blurring code prior to WhatsApp for Android v2.21.22.7 and WhatsApp Business for Android v2.21.22.7 could have allowed an out-of-bounds write if a user sent a malicious image...
PT-2021-15662
Name of the Vulnerable Software and Affected Versions: WhatsApp for Android versions prior to 2.21.22.7 WhatsApp Business for Android versions prior to 2.21.22.7 Description: A missing bounds check in image blurring code could have allowed an out-of-bounds write if a user sent a malicious image...
CVE-2021-24041: Heap-based Buffer Overflow
A missing bounds check in image blurring code prior to WhatsApp for Android v2.21.22.7 and WhatsApp Business for Android v2.21.22.7 could have allowed an out-of-bounds write if a user sent a malicious image...
Path traversal
A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13 and WhatsApp Business for Android v2.21.8.13 could have allowed path traversal attacks that overwrite WhatsApp files...
CVE-2021-24035
A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13 and WhatsApp Business for Android v2.21.8.13 could have allowed path traversal attacks that overwrite WhatsApp files...
PT-2021-15657
Name of the Vulnerable Software and Affected Versions: WhatsApp for Android versions prior to 2.21.8.13 WhatsApp Business for Android versions prior to 2.21.8.13 Description: The issue is related to a lack of filename validation when unzipping archives, which could have allowed path traversal...
CVE-2021-24035: Relative Path Traversal
A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13 and WhatsApp Business for Android v2.21.8.13 could have allowed path traversal attacks that overwrite WhatsApp files...
CVE-2021-24027: Use of Cache Containing Sensitive Information
A cache configuration issue prior to WhatsApp for Android v2.21.4.18 and WhatsApp Business for Android v2.21.4.18 may have allowed a third party with access to the device’s external storage to read cached TLS material...
CVE-2020-1910: Out-of-bounds Write
A missing bounds check in WhatsApp for Android prior to v2.21.1.13 and WhatsApp Business for Android prior to v2.21.1.13 could have allowed out-of-bounds read and write if a user applied specific image filters to a specially crafted image and sent the resulting image...
CVE-2020-1905
Media ContentProvider URIs used for opening attachments in other apps were generated sequentially prior to WhatsApp for Android v2.20.185, which could have allowed a malicious third party app chosen to open the file to guess the URIs for previously opened attachments until the opener app is...
CVE-2020-1905
CVE-2020-1905 concerns WhatsApp for Android prior to v2.20.185. It describes that Media ContentProvider URIs used to open attachments were generated sequentially, enabling a malicious app chosen to open a file to guess the URI of a previously opened attachment until the opener app is terminated. ...
PT-2020-15156
Name of the Vulnerable Software and Affected Versions WhatsApp for Android versions 2.20.108 through 2.20.140 WhatsApp Business for Android versions 2.20.35 through 2.20.49 Description A user running a quick search on a highly forwarded message could have been sent to the Google service over plai...
PT-2020-15160
Name of the Vulnerable Software and Affected Versions WhatsApp for Android versions prior to 2.20.130 WhatsApp Business for Android versions prior to 2.20.46 Description A buffer overflow could occur when processing malformed local videos with E-AC-3 audio streams, potentially allowing an...
PT-2020-15159
Name of the Vulnerable Software and Affected Versions WhatsApp for Android versions prior to 2.20.185 Description A issue exists where Media ContentProvider URIs used for opening attachments in other apps were generated sequentially, which could have allowed a malicious third party app to guess t...