CVE-2025-36759

Through the provision of user names, SolaX Cloud will suggest similar user accounts and thereby leak sensitive information such as user email addresses and phone numbers...

CVE-2025-36759 Sensitive Information Disclosure in SolaX Cloud

Through the provision of user names, SolaX Cloud will suggest similar user accounts and thereby leak sensitive information such as user email addresses and phone numbers...

CVE-2025-36759 Sensitive Information Disclosure in SolaX Cloud

Through the provision of user names, SolaX Cloud will suggest similar user accounts and thereby leak sensitive information such as user email addresses and phone numbers...

CVE-2025-36759

CVE-2025-36759 affects SolaX Cloud. The vulnerability stems from the username-suggestion feature that can reveal other users’ emails and phone numbers. Impact is information disclosure of user contact data (confidentiality HIGH). Connected sources confirm SolaX Cloud and the leakage via similar a...

PT-2025-37031

Name of the Vulnerable Software and Affected Versions: SolaX Cloud versions prior to 27-06-2025 Description: SolaX Cloud leaks sensitive information, such as user email addresses and phone numbers, by suggesting similar user accounts when user names are provided. This information disclosure poses...

Australian ISP iiNet Reports Data Breach, Customer Accounts Stolen

Australian ISP iiNet confirms data breach as hackers stole 280,000 email accounts, phone numbers and user data using…...

CVE-2025-20998

Improper access control in SamsungAccount for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to access phone number...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices versions prior to SMR Jul-2025 Release 1, which stems from improper access control and could...

Scammers hijack websites of Bank of America, Netflix, Microsoft, and more to insert fake phone number

The examples in this post are actual fraud attempts found by Malwarebytes Senior Director of Research, Jérôme Segura. Cybercriminals frequently use fake search engine listings to take advantage of our trust in popular brands, and then scam us. It often starts, as with so many attacks, with a...

CVE-2025-44614

Tinxy WiFi Lock Controller v1 RF was discovered to store users' sensitive information, including credentials and mobile phone numbers, in plaintext...

Threat Actor Claims TikTok Breach, Puts 428 Million Records Up for Sale

Alleged TikTok Breach: Threat actor “Often9” claims to sell 428M user records, including emails, phones, and account details on dark web forum. TikTok is investigating!...

CVE-2025-44614: Cleartext Storage of Sensitive Information

Tinxy WiFi Lock Controller v1 RF was discovered to store users' sensitive information, including credentials and mobile phone numbers, in plaintext...

CVE-2025-44614

The Tinxy WiFi Lock Controller v1 RF is vulnerable to cleartext storage of sensitive information . The device stores user credentials and mobile phone numbers in plaintext, which may lead to information leakage. To mitigate this risk, it is recommended to restrict access to the device, avoid usin...

VulnCheck KEV: CVE-2025-48926

The admin panel in the TeleMessage service through 2025-05-05 allows attackers to discover usernames, e-mail addresses, passwords, and telephone numbers...

CVE-2024-23210

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watchOS 10.3. An app may be able to view a user's phone number in system logs...

CVE-2022-30733

Sensitive information exposure in Sign-in log in Samsung Account prior to version 13.2.00.6 allows attackers to get an user email or phone number without permission...

CVE-2025-32884

An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12. By default, a GID is the user's phone number unless they specifically opt out. A phone number is very sensitive information because it can be tied back to individuals. The app does not encrypt the GID in messages...

TikTok: Stored XSS on TikTok's backend leads to the leakage of highly sensitive administrator data (Cookies, API Keys, Internal Paths, Emails, phone numbers).

A stored cross-site scripting vulnerability was discovered in TikTok's contact form backend. Malicious code submitted through the form executed when administrators viewed the submission, exposing sensitive internal data such as cookies, API keys, internal paths, emails, and phone numbers...

Banking Malware Uses Live Numbers to Hijack OTPs, Targeting 50,000 Victims

A banking malware campaign using live phone numbers to redirect SMS messages has been identified by the zLabs research team, uncovering 1,000+ malicious apps and 2.5GB of exposed data...

Apple iOS和Apple iPadOS 日志信息泄露漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A log information disclosure vulnerability exists in Apple iOS version 18.3 and Apple iPadOS version 18.3, which stems fro...