📦 Telemessage

This vulnerability in TeleMessage allows attackers to reuse stolen long-lived authentication credentials to gain unauthorized access to the service. It affects all TeleMessage users who haven't implem...

TeleMessage service uses client-side MD5 hashing for authentication, allowing attackers to intercept or forge authentication credentials. This affects all TeleMessage users who rely on the TM SGNL app...

The TeleMessage service exposes a Spring Boot Actuator heap dump endpoint at /heapdump, allowing attackers to retrieve memory contents. This vulnerability affects all TeleMessage deployments using vul...

This CVE describes a hardcoded credential vulnerability in TeleMessage's archiving backend that accepts API calls with static username 'logfile' and password 'enRR8UVVywXYbFkqU#QDPRkO' for authenticat...