Actively exploited vulnerabilities affecting TeleMessage products.https://wildfortech.comhttps://wildfortech.com/security#CVE-2025-48927https://wildfortech.com/security#CVE-2025-48927TeleMessage TM SGNL ships with Spring Boot Actuator misconfigured so that its heap dump endpoint is publicly reachable at /heapdump. An attacker who can reach that URI can download a snapshot of the application's memory, which may contain credentials, session tokens, encryption keys, and sensitive message content. Because TM SGNL is a secure messaging application, exposure of heap memory is especially damaging — defeating the confidentiality guarantees users rely on.Tue, 01 Jul 2025 00:00:00 GMTTeleMessageTM SGNLhttps://wildfortech.com/security#CVE-2025-48928https://wildfortech.com/security#CVE-2025-48928TeleMessage TM SGNL, a modified Signal-like messaging app, exposes heap memory through a JSP application in a way that functions like a core dump. Because the app transmits passwords over HTTP, those plaintext credentials end up captured in this dump and become accessible to unauthorized parties. This means attackers who can reach that exposed endpoint could harvest account passwords, potentially compromising communications and connected systems well beyond the messaging app itself.Tue, 01 Jul 2025 00:00:00 GMTTeleMessageTM SGNL