12.2TB of User Data Exposed in Passion.io Breach: Over 3.6 Million Records Left Unprotected

June 5, 2025

12.2TB of User Data Exposed in Passion.io Breach: Over 3.6 Million Records Left Unprotected

In a recent disclosure by cybersecurity researcher Jeremiah Fowler, vpnMentor uncovered a massive unprotected database allegedly tied to Passion.io, a no-code app-building platform used by influencers …

Published Date:
Jun 05, 2025 (4 hours, 39 minutes ago)

Vulnerabilities has been mentioned in this article.

CVE-2023-4966

Source: Read More

Previous ArticleCisco Patches Two Vulnerabilities in CCP and ISE: Proof-of-Concept Exploits Publicly Available

Next Article IBM Cloud login breaks for second time this week and Big Blue isn’t saying why

Highlights

CVE-2025-53006 – DataEase PostgreSQL/Redshift SSL Factory Parameter Injection Vulnerability

July 2, 2025

CVE ID : CVE-2025-53006

Published : July 2, 2025, 3:15 p.m. | 4 hours, 27 minutes ago

Description : DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.11, in both PostgreSQL and Redshift, apart from parameters like “socketfactory” and “socketfactoryarg”, there are also “sslfactory” and “sslfactoryarg” with similar functionality. The difference lies in that “sslfactory” and related parameters need to be triggered after establishing the connection. Other similar parameters include “sslhostnameverifier”, “sslpasswordcallback”, and “authenticationPluginClassName”. This issue has been patched in 2.10.11.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

This week in AI updates: Mistral’s new Le Chat features, ChatGPT updates, and more (September 5, 2025)

Designing For TV: Principles, Patterns And Practical Guidance (Part 2)

Neo4j introduces new graph architecture that allows operational and analytics workloads to be run together

Beyond the benchmarks: Understanding the coding personalities of different LLMs

Hitachi Energy Pledges $1B to Strengthen US Grid, Build Largest Transformer Plant in Virginia

How to debug a web app with Playwright MCP and GitHub Copilot

Between Strategy and Story: Thierry Chopain’s Creative Path

What You Need to Know About CSS Color Interpolation

Why browsers throttle JavaScript timers (and what to do about it)

Why browsers throttle JavaScript timers (and what to do about it)

How to create Google Gemini AI component in Total.js Flow

Drupal 11’s AI Features: What They Actually Mean for Your Team

Harnessing GitOps on Linux for Seamless, Git-First Infrastructure Management

Harnessing GitOps on Linux for Seamless, Git-First Infrastructure Management

How DevOps Teams Are Redefining Reliability with NixOS and OSTree-Powered Linux

Distribution Release: Linux Mint 22.2

12.2TB of User Data Exposed in Passion.io Breach: Over 3.6 Million Records Left Unprotected

12.2TB of User Data Exposed in Passion.io Breach: Over 3.6 Million Records Left Unprotected

GhostRedirector poisons Windows servers: Backdoors with a side of Potatoes

VirusTotal Finds 44 Undetected SVG Files Used to Deploy Base64-Encoded Phishing Pages

Optimize query responses with user feedback using Amazon Bedrock embedding and few-shot prompting

CVE-2025-5871 – Papendorf SOL Connect Center Web Interface Authentication Bypass Vulnerability

CVE-2025-5939 – Telegram for WP WordPress Stored Cross-Site Scripting Vulnerability

CVE-2025-4054 – Relevanssi WordPress Stored Cross-Site Scripting Vulnerability

CVE-2025-53006 – DataEase PostgreSQL/Redshift SSL Factory Parameter Injection Vulnerability

Best 123Movies Alternatives in 2025 (Free & Legal Streaming Options)

Rhino Linux presenta il nuovo ambiente desktop UBXI basato su KDE e il gestore pacchetti RPK2

Hollow Knight: Silksong will be PLAYABLE at Gamescom — among the big new titles hitting the Xbox booth

12.2TB of User Data Exposed in Passion.io Breach: Over 3.6 Million Records Left Unprotected

12.2TB of User Data Exposed in Passion.io Breach: Over 3.6 Million Records Left Unprotected

Related Posts