Telegram Desktop Flaw Lets Hidden JavaScript Exfiltrate Messages From HTML Exports

A flaw in Telegram Desktop let a bot’s message plant hidden JavaScript inside chats that users exported to HTML files, security researchers at ExPatch said in a writeup published on September 12.

In Telegram, the message looked ordinary, with a link button, and the script ran only when someone opened the export file in a web browser. It could then copy every message in that file to

Source: The Hacker News

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

Attack Update: Top 5 Attack-IPs auf doode.info – 04.07.2026

Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 89.167.35.212 — 629 requests (recent log) 216.244.66.232 — 167 requests (recent log) 216.73.216.125 — 131 requests (recent

Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code

Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code Broadcom has released security updates for two security flaws impacting VMware Workstation and Fusion, including one critical bug

How I developed an Am29000 C compiler and web browser

How I developed an Am29000 C compiler and web browser Source: Hacker News