Users of the the browser-based versions of WhatsApp and Telegram have unknowingly been at risk to hacking after a security research firm uncovered a flaw that could have been used to take control of entire accounts.