THE KNOWLEDGE IS THE WORK.

Resources(82)

14.04.2021
Remote exploitation of a man-in-the-disk vulnerability in WhatsApp (CVE-2021-24027)
Chariton Karamitas
CENSUS has been investigating for some time now the exploitation potential of Man-in-the-Disk (MitD) vulnerabilities in Android. Recently, CENSUS identified two such vulnerabilities in the popular WhatsApp messenger app for Android. The first of these was possibly independently reported to Facebook and was found to be...
14.04.2021
WhatsApp exposure of TLS 1.2 cryptographic material to third party apps
Chariton Karamitas
CENSUS identified that versions prior to 2.21.4.18 of WhatsApp for Android allowed third party apps to access WhatsApp TLS 1.2 cryptographic material, as this was stored in "app-specific external storage".
17.02.2021
Canary Mail and MailCore2 library missing certificate validation check on IMAP STARTTLS
Rayd Debbas
CENSUS identified that the Canary Mail software in versions 3.20 and 3.21 (and possibly previous versions) is missing a certificate validation check when performing an IMAP connection configured with STARTTLS.

MENU