THE KNOWLEDGE IS THE WORK.

Resources(82)

14.04.2021
Remote exploitation of a man-in-the-disk vulnerability in WhatsApp (CVE-2021-24027)
Chariton Karamitas
CENSUS has been investigating for some time now the exploitation potential of Man-in-the-Disk (MitD) vulnerabilities in Android. Recently, CENSUS identified two such vulnerabilities in the popular WhatsApp messenger app for Android. The first of these was possibly independently reported to Facebook and was found to be...
14.04.2021
WhatsApp exposure of TLS 1.2 cryptographic material to third party apps
Chariton Karamitas
CENSUS identified that versions prior to 2.21.4.18 of WhatsApp for Android allowed third party apps to access WhatsApp TLS 1.2 cryptographic material, as this was stored in "app-specific external storage".
02.10.2017
e2openplugin OpenWebif saveConfig remote code execution
John Torakis
OpenWebif is a Web application that is used in IP TVs and media boxes to provide an easy-to-use Web Interface. It is written mostly in Python (Backend) and JavaScript (Frontend). It can be found in DreamBox devices. A vulnerability was identified in the saveConfig() function.

MENU