5383 matches found
CVE-2025-62763: Server-Side Request Forgery (SSRF)
Zimbra Collaboration ZCS before 10.1.12 allows SSRF because of the configuration of the chat proxy...
CVE-2025-62763
Zimbra Collaboration ZCS before 10.1.12 allows SSRF because of the configuration of the chat proxy...
Zimbra Collaboration 10.0.x < 10.0.13 Stored Cross-Site Scripting
According to its banner, the version of Zimbra Collaboration running on the remote host is 10.0.x prior to 10.0.13 or 10.1.x prior to 10.1.5. It is, therefore, affected by a Stored Cross-Site Scripting XSS vulnerability due to insufficient sanitization of HTML content in ICS files. Note that the...
Zimbra Collaboration 代码问题漏洞
Zimbra Collaboration is an open source enterprise-class email and collaboration platform from Zimbra, Inc. that supports email, calendaring, document management, and team collaboration features. A code issue vulnerability exists in Zimbra Collaboration versions prior to 10.1.12, which stems from ...
CVE-2025-62763
Zimbra Collaboration ZCS before 10.1.12 allows SSRF because of the configuration of the chat proxy...
EUVD-2025-35204
Zimbra Collaboration ZCS before 10.1.12 allows SSRF because of the configuration of the chat proxy...
Extortion and ransomware drive over half of cyberattacks
In 80% of the cyber incidents Microsoft’s security teams investigated last year, attackers sought to steal data—a trend driven more by financial gain than intelligence gathering. According to the latest Microsoft Digital Defense Report, written with our Chief Information Security Officer Igor...
PT-2025-42914
Name of the Vulnerable Software and Affected Versions Zimbra Collaboration versions prior to 10.1.12 Description A flaw exists in Zimbra Collaboration Suite ZCS due to insufficient input validation. This can allow a remote attacker to perform a Server-Side Request Forgery SSRF attack. The...
GRIDAI: Generating and Repairing Intrusion Detection Rules Via Collaboration among Multiple LLM-Based Agents
Rule-based network intrusion detection systems play a crucial role in the real-time detection of Web attacks. However, most existing works primarily focus on automatically generating detection rules for new attacks, often overlooking the relationships between new attacks and existing rules, which...
CVE-2025-20329: Insertion of Sensitive Information into Log File
A vulnerability in the logging component of Cisco TelePresence Collaboration Endpoint CE and Cisco RoomOS Software could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. To exploit this vulnerability, the attacker must have valid...
Cisco TelePresence Collaboration Endpoint Software 日志信息泄露漏洞
Cisco TelePresence Collaboration Endpoint Software is a suite of collaboration endpoint software from Cisco. A log information disclosure vulnerability exists in Cisco TelePresence Collaboration Endpoint Software, which stems from unencrypted credentials being stored when logging is enabled for t...
PT-2025-42378
Name of the Vulnerable Software and Affected Versions Cisco TelePresence Collaboration Endpoint and Cisco RoomOS Software affected versions not specified Description A flaw exists in the logging component that may allow a remote attacker with administrative access to view sensitive information in...
Microsoft raises the bar: A smarter way to measure AI for cybersecurity
ExCyTIn-Bench is Microsoft’s newest open-source benchmarking tool designed to evaluate how well AI systems perform real-world cybersecurity investigations.1 It helps business leaders assess language models by simulating realistic cyberthreat scenarios and providing clear, actionable insights into...
Beyond CVSS: Critical CVE Vulnerabilities Analysis
Attackers don't care about your CVSS scores. They care about finding a path into your network. That path might not be a single, glaring "critical" vulnerability. Often, it’s a chain of lower-severity weaknesses on overlooked assets that, when combined, give them the keys to the kingdom. This is w...
Navigating the Dual-Use Nature and Security Implications of Reconfigurable Intelligent Surfaces in Next-Generation Wireless Systems
Reconfigurable intelligent surface RIS technology offers significant promise in enhancing wireless communication systems, but its dual-use potential also introduces substantial security risks. This survey explores the security implications of RIS in next-generation wireless networks. We first...
Zimbra Collaboration Suite Code Execution
The vulnerability of the Zimbra Collaboration Suite email management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and gain unauthorized access to protected information...
Zimbra Collaboration Suite GraphQL Client CSRF
The vulnerability of the built-in GraphQL client of the Zimbra Collaboration Suite email management system is related to the of cross-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack and expose sensitive information...
Zimbra Collaboration Server 9.x < 9.0.0 Patch 39, 10.0.x < 10.0.13, 10.1.x < 10.1.5 XSS
According to its self-reported version number, Zimbra Collaboration Server is affected by the following vulnerability including:A stored cross-site scripting XSS vulnerability exists in the Classic Web Client due to insufficient sanitization of HTML. Using a specifically crafted email, a attacker...
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2025-27915link is external Synacor Zimbra Collaboration Suite ZCS Cross-site Scripting Vulnerability This type of vulnerability is a frequent attack vector for...