https://hackingpassion.com/tags/cross-site-scripting/Recent content in Cross-Site Scripting on HackingPassion.com : root@HackingPassion.com-[~]HugoenSat, 25 Jul 2026 12:13:24 +0200https://hackingpassion.com/hermeticreader-adobe-whatsapp-flaw/Sat, 25 Jul 2026 12:13:24 +0200https://hackingpassion.com/hermeticreader-adobe-whatsapp-flaw/<p>An Adobe extension on roughly <strong>329 million</strong> browsers had a flaw the researchers named <strong>HermeticReader</strong>, and it let any web page you opened read your WhatsApp Web. The chat list, the contact names, the conversation you had open, all of it lifted off the screen while you did nothing but land on the page. 🧐</p> <p>There was no malware. Nothing landed on your machine, nothing was downloaded. Your password stayed untouched, your session cookie too. WhatsApp itself had no bug. The attacker needed no Adobe account and no way onto your computer. You opened a page that looked like a search result or a link in an email, and that was enough.</p>