CVE-2025-48925

creationtimestamp| type| source ---|---|--- 2025-05-28 17:33:01+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqaqbfxofrj2 2025-05-28 17:40:17+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lqaqqdfqh724 2025-07-01...

CVE-2025-48925

The TeleMessage service through 2025-05-05 relies on the client side e.g., the TM SGNL app to do MD5 hashing, and then accepts the hash as the authentication credential...

CVE-2025-48925

Summary: The TeleMessage service (through 2025-05-05) relies on a client-side MD5 hashing step (in the TM SGNL app) and accepts the resulting hash as the authentication credential. This design implies that authentication can be performed using a hash generated on the client, effectively tying cre...