New Research Reveals Multiple Attack Surfaces in WeChat & Other Instant Messaging Apps

May 30, 2025

New Research Reveals Multiple Attack Surfaces in WeChat & Other Instant Messaging Apps

Instant messaging (IM) applications like WhatsApp, Telegram, WeChat, and QQ have become the “digital arteries” of modern society, facilitating communication for billions of users worldwide.
However, t …

Published Date:
May 30, 2025 (2 hours, 59 minutes ago)

Vulnerabilities has been mentioned in this article.

Source: Read More

Previous ArticleStarting Redwood Experience with 25A Inventory Management

Next Article SEC Consult SA-20250521-0 :: Multiple Vulnerabilities in eCharge Hardy Barth cPH2 and cPP2 charging stations

Highlights

CVE-2025-32950 – Jmix File Path Traversal Vulnerability

April 22, 2025

CVE ID : CVE-2025-32950

Published : April 22, 2025, 6:15 p.m. | 31 minutes ago

Description : Jmix is a set of libraries and tools to speed up Spring Boot data-centric application development. In versions 1.0.0 to 1.6.1 and 2.0.0 to 2.3.4, attackers could manipulate the FileRef parameter to access files on the system where the Jmix application is deployed, provided the application server has the necessary permissions. This can be accomplished either by modifying the FileRef directly in the database or by supplying a harmful value in the fileRef parameter of the `/files` endpoint of the generic REST API. This issue has been patched in versions 1.6.2 and 2.4.0. A workaround is provided on the Jmix documentation website.

Severity: 6.5 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

DOOM: The Dark Ages reaches 3 million players 7x faster than DOOM: Eternal

May 20, 2025

This AI Paper Introduces Effective State-Size (ESS): A Metric to Quantify Memory Utilization in Sequence Models for Performance Optimization

May 11, 2025

Microsoft Patch Tuesday June 2025: One Zero-Day, Nine High-risk Flaws Fixed

June 11, 2025

CodeSOD: A Unique Way to Primary Key

BrowserStack launches Figma plugin for detecting accessibility issues in design phase

Parasoft brings agentic AI to service virtualization in latest release

Node.js vs. Python for Backend: 7 Reasons C-Level Leaders Choose Node.js Talent

The best CRM software with email marketing in 2025: Expert tested and reviewed

This multi-port car charger can power 4 gadgets at once – and it’s surprisingly cheap

I’m a wearables editor and here are the 7 Pixel Watch 4 rumors I’m most curious about

8 ways I quickly leveled up my Linux skills – and you can too

The Intersection of Agile and Accessibility – A Series on Designing for Everyone

The Intersection of Agile and Accessibility – A Series on Designing for Everyone

Zero Trust & Cybersecurity Mesh: Your Org’s Survival Guide

Execute Ping Commands and Get Back Structured Data in PHP

A Tomb Raider composer has been jailed — His legacy overshadowed by $75k+ in loan fraud

A Tomb Raider composer has been jailed — His legacy overshadowed by $75k+ in loan fraud

“I don’t think I changed his mind” — NVIDIA CEO comments on H20 AI GPU sales resuming in China following a meeting with President Trump

Galaxy Z Fold 7 review: Six years later — Samsung finally cracks the foldable code

New Research Reveals Multiple Attack Surfaces in WeChat & Other Instant Messaging Apps

New Research Reveals Multiple Attack Surfaces in WeChat & Other Instant Messaging Apps

CVE-2025-44658 – Netgear RAX30 PHP-FPM Misconfigured Extension Bypass Vulnerability

CVE-2025-7393 – Drupal Mail Login Authentication Bypass

Microsft says Windows Hello no longer works in the dark, and it’s NOT a bug

Critical Python Tarfile Flaw (CVE-2025-4517, CVSS 9.4): Arbitrary File Write, PoC Available

CVE-2025-49013 – WilderForge GitHub Actions Shell Code Injection Vulnerability

Elden Ring Nightreign: How to unlock character skins and change garb

CVE-2025-32950 – Jmix File Path Traversal Vulnerability

DOOM: The Dark Ages reaches 3 million players 7x faster than DOOM: Eternal

This AI Paper Introduces Effective State-Size (ESS): A Metric to Quantify Memory Utilization in Sequence Models for Performance Optimization

Microsoft Patch Tuesday June 2025: One Zero-Day, Nine High-risk Flaws Fixed

New Research Reveals Multiple Attack Surfaces in WeChat & Other Instant Messaging Apps

New Research Reveals Multiple Attack Surfaces in WeChat & Other Instant Messaging Apps

Related Posts