TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability

TeleMessage TM SGNL contains an exposure of core dump file to an unauthorized control sphere Vulnerability. This vulnerability is based on a JSP application in which the heap content is roughly equivalent to a "core dump" in which a password previously sent over HTTP would be included in this dum...

TeleMessage security vulnerabilities

TeleMessage is a secure and compliant messaging solution for organizations from TeleMessage Israel. A security vulnerability exists in TeleMessage version 2025-05-05 and earlier, which stems from an administrative panel that allows an attacker to discover usernames, email addresses, passwords, an...

PT-2025-23110

Name of the Vulnerable Software and Affected Versions TeleMessage service through 2025-05-05 Description The issue concerns the configuration of Spring Boot Actuator with an exposed heap dump endpoint at the "/heapdump" URI. This has been exploited in the wild in May 2025. Recommendations For...

CVE-2025-48926

The TeleMessage service (versions through 2025-05-05 ) contains a security vulnerability in its admin panel that allows attackers to discover sensitive information, including usernames , e-mail addresses , passwords , and telephone numbers . This vulnerability has been exploited in the wild . As ...

PT-2025-23101

Name of the Vulnerable Software and Affected Versions TeleMessage service through 2025-05-05 Description The issue allows attackers to discover sensitive information, including usernames, e-mail addresses, passwords, and telephone numbers, in the admin panel of the TeleMessage service. This has...

TeleMessage security vulnerabilities

TeleMessage is a secure and compliant messaging solution for organizations from TeleMessage Israel. A security vulnerability exists in TeleMessage version 2025-05-05 and earlier, which stems from the use of MD5 for password hashing and could lead to a rainbow table attack...

CISA Adds TeleMessage Vulnerability to KEV List Following Breach

CISA adds TeleMessage flaw to KEV list, urges agencies to act within 3 weeks after a breach exposed…...

TeleMessage TM SGNL Hidden Functionality Vulnerability

TeleMessage TM SGNL contains a hidden functionality vulnerability in which the archiving backend holds cleartext copies of messages from TM SGNL application users...

CVE-2025-47730

The TeleMessage archiving backend (versions through 2025-05-05 ) is vulnerable to an authentication bypass due to the use of hardcoded credentials . The system accepts API calls from the TM SGNL (Archive Signal) app requesting authentication tokens using the username logfile and the password enRR...

PT-2025-20382

Name of the Vulnerable Software and Affected Versions TeleMessage archiving backend versions through 2025-05-05 Description The issue concerns the acceptance of API calls from the TM SGNL aka Archive Signal app to request an authentication token, using hardcoded credentials. The credentials used...

CVE-2025-47730

The TeleMessage archiving backend through 2025-05-05 accepts API calls to request an authentication token from the TM SGNL aka Archive Signal app with the credentials of logfile for the user and enRR8UVVywXYbFkqUQDPRkO for the password...