12.2TB of User Data Exposed in Passion.io Breach: Over 3.6 Million Records Left Unprotected

June 5, 2025

12.2TB of User Data Exposed in Passion.io Breach: Over 3.6 Million Records Left Unprotected

In a recent disclosure by cybersecurity researcher Jeremiah Fowler, vpnMentor uncovered a massive unprotected database allegedly tied to Passion.io, a no-code app-building platform used by influencers …

Published Date:
Jun 05, 2025 (4 hours, 39 minutes ago)

Vulnerabilities has been mentioned in this article.

CVE-2023-4966

Source: Read More

Previous ArticleCisco Patches Two Vulnerabilities in CCP and ISE: Proof-of-Concept Exploits Publicly Available

Next Article IBM Cloud login breaks for second time this week and Big Blue isn’t saying why

Highlights

CVE-2025-30084 – Joomla RSMail! Stored XSS

June 5, 2025

CVE ID : CVE-2025-30084

Published : June 5, 2025, 2:15 p.m. | 53 minutes ago

Description : A stored XSS vulnerability in RSMail! component 1.19.20 – 1.22.26 for Joomla was discovered. The issue occurs within the dashboard component, where user-supplied input is not properly sanitized before being stored and rendered. An attacker can inject malicious JavaScript code into text fields or other input points, which is subsequently executed in the browser of any user who clicks on the crafted text in the dashboard.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

BrowserStack launches Figma plugin for detecting accessibility issues in design phase

Parasoft brings agentic AI to service virtualization in latest release

Node.js vs. Python for Backend: 7 Reasons C-Level Leaders Choose Node.js Talent

Handling JavaScript Event Listeners With Parameters

I finally gave NotebookLM my full attention – and it really is a total game changer

Google Chrome for iOS now lets you switch between personal and work accounts

How the Trump administration changed AI: A timeline

Download your photos before AT&T shuts down its cloud storage service permanently

Laravel Live Denmark

Laravel Live Denmark

The July 2025 Laravel Worldwide Meetup is Today

Livewire Security Vulnerability

Galaxy Z Fold 7 review: Six years later — Samsung finally cracks the foldable code

Galaxy Z Fold 7 review: Six years later — Samsung finally cracks the foldable code

Halo and Half-Life combine in wild new mod, bringing two of my favorite games together in one — here’s how to play, and how it works

Surprise! The iconic Roblox ‘oof’ sound is back — the beloved meme makes “a comeback so good it hurts” after three years of licensing issues

12.2TB of User Data Exposed in Passion.io Breach: Over 3.6 Million Records Left Unprotected

12.2TB of User Data Exposed in Passion.io Breach: Over 3.6 Million Records Left Unprotected

UNC6148 Backdoors Fully-Patched SonicWall SMA 100 Series Devices with OVERSTEP Rootkit

Hackers Exploit SharePoint Zero-Day Since July 7 to Steal Keys, Maintain Persistent Access

CVE-2024-7103 – WSO2 Identity Server Reflected XSS

CVE-2025-5953 – WordPress WP Human Resource Management Privilege Escalation

“We’re here for the long haul.” Diablo manager confirms 10-year road map

Raspberry Pi Imager 1.9.4 Released with Various Changes

CVE-2025-30084 – Joomla RSMail! Stored XSS

Scoperte 2 Nuove Vulnerabilità che Minacciano il Mondo GNU/Linux

CVE-2025-48175 – Libavif Integer Overflow Vulnerability

Remote Code Execution & Privilege Escalation: Two New Threats in CISA’s KEV

12.2TB of User Data Exposed in Passion.io Breach: Over 3.6 Million Records Left Unprotected

12.2TB of User Data Exposed in Passion.io Breach: Over 3.6 Million Records Left Unprotected

Related Posts