Telegram Desktop Flaw Lets Hidden JavaScript Exfiltrate Messages From HTML Exports

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-09-14 17:58 UTC
Importiert: 2026-09-19 10:27 UTC
Quelle-ID: thn_global
uid_hash: fc5c3a4c5f1956a41f3ec33929785cf2ace06fd39a0b3a62dde73c209227517d

The Hacker News

Inhalt

A flaw in Telegram Desktop let a bot's message plant hidden JavaScript inside chats that users exported to HTML files, security researchers at ExPatch said in a writeup published on September 12.

In Telegram, the message looked ordinary, with a link button, and the script ran only when someone opened the export file in a web browser. It could then copy every message in that file to

No data

Quellen-Details

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
The Hacker News	thn_global	security_news		-	de	https://feeds.feedburner.com/TheHackersNews

Zurueck zur Eintrags-Liste