#FileExtensionVulnerability

WhatsApp for Windows lets Python, PHP scripts execute with no warning

by

July 27, 2024 at 04:33PM A security issue in the latest version of WhatsApp for Windows allows the execution of Python and PHP attachments without warning, if the recipient opens them. Although WhatsApp blocks several risky file types, it does not plan to add Python and PHP scripts to the list. The company also dismissed … Read more

Telegram fixes Windows app zero-day caused by file extension typo

by

April 12, 2024 at 02:47PM The Telegram Windows desktop app had a zero-day vulnerability allowing the automatic launch of Python scripts. Telegram disputed these claims, but a proof of concept exploit was shared on a hacking forum. Telegram fixed this issue with a server-side fix. Telegram’s Desktop client has also been modified to prevent such … Read more