Adult Themed Virtual Reality App spills Names, Emails of Thousands
ID: 504a326f-a2f2-52e3-afb0-dfd7c8a7c3fb
STIX ID: report--504a326f-a2f2-52e3-afb0-dfd7c8a7c3fb
Feed Name: Security Ledger
Threat Score
Researchers found that the SinVR adult VR desktop application exposes approximately 19,000 customer records via an unauthenticated API function ('downloadallcustomers'), leaking names, email addresses and device names; payments and passwords were reportedly not exposed. The finding was published after multiple failed attempts to notify the vendor, raising privacy and social-engineering risks for affected users.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.