TGViewer
Android Security & Malware Android Security & Malware @androidmalware · 44.9K subscribers
Post #2937 9.94K

Forwarded from The Bug Bounty Hunter

Reading Contact Photos Without READ_CONTACTS: A Google Messages Confused Deputy Bug

https://blog.devploit.dev/posts/google-messages-avatarcontentprovider-contacts-bypass/
devploit / blog Reading Contact Photos Without READ_CONTACTS: A Google Messages Confused Deputy Bug Analysis of a fixed Google Messages vulnerability that exposed contact photos without READ_CONTACTS, covering its root cause and responsible disclosure.
  • ❤ 49
  • 👍 20
Open in Telegram All posts from @androidmalware
More from @androidmalware
  1. Sep 22, 2026Turn a Rooted Android Phone into an NFC Authenticator and Automation Tool for Your PC http…
  2. Sep 17, 2026RatHat: AI-Powered Mobile Threat is Here for Your Credentials & Bank Accounts https://zimp…
  3. Sep 14, 2026Mantax Otax: Indonesian Mobile Ransomware with Spyware Integration https://zimperium.com/b…
  4. Sep 14, 2026Vwork: Weaponized Open-source Software as an Addon for Gigabud https://www.group-ib.com/bl…
  5. Sep 9, 2026RCE in mexc Android app via Bypass URL validation to access the WebView, JS-Bridge with Pa…
  6. Sep 9, 2026WeWorm: The first zero-click worm to spread through WeChat calls across iOS and Android ht…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →