0ffsecninja/0ffsecninja.github.io

0ffsecninja/0ffsecninja.github.io

GitHubGitHub
GitHubgithub.com
Releases0
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2020-17448↗
7.8 HIGH6.8 MEDIUM

Telegram Desktop through 2.1.13 allows a spoofed file type to bypass the Dangerous File Type Execution protection mechanism, as demonstrated by use of the chat window with a filename that lacks an extension.

CVE-2020-12474↗
6.5 MEDIUM4.3 MEDIUM

Telegram Desktop through 2.0.1, Telegram through 6.0.1 for Android, and Telegram through 6.0.1 for iOS allow an IDN Homograph attack via Punycode in a public URL or a group chat invitation URL.