CVE-2022-24682

An issue was discovered in the Calendar feature in Zimbra Collaboration Suite 8.8.x before 8.8.15 patch 30 update 1, as exploited in the wild starting in December 2021. An attacker could place HTML containing executable JavaScript inside element attributes. This markup becomes unescaped, causing...

Siemens Teamcenter Visualization Out-of-Bounds Writing Vulnerability (CNVD-2022-10022)

An out-of-bounds write vulnerability exists in Siemens Teamcenter Visualization, which provides team collaboration capabilities for designing 2D and 3D scenes, and can be exploited by attackers to execute code in the context of the current process...

Siemens Teamcenter Visualization and Solid Edge File Parsing Vulnerability

Siemens Teamcenter Visualization is a software that provides team collaboration capabilities for designing 2D and 3D scenes. Siemens Solid Edge is a 3D CAD software from Siemens, Germany. Siemens Teamcenter Visualization and Solid Edge is vulnerable to file parsing, which can be exploited by...

7Rapid Questions With Our APAC Sales Manager, Soumi

For this installment of 7Rapid Questions, we sat down with Soumi Mukherjee, APAC Sales Manager - ANZ North Sales, to learn more about what drives her in her role at Rapid7. 1. Why did you join Rapid7? The truth is I joined for the people. I worked for a Rapid7 channel partner prior, and my...

Information Security Analyst – Job Description and How to Become

Introduction A security expert is a wide work term that alludes to persons who keep up with the security of PC frameworks and organizations. Let us go through an information security analyst jobs description What is an information security analyst? Huge data breaks at colossal associations have a...

TrickBot Crashes Security Researchers’ Browsers in Latest Upgrade

Trojan titan TrickBot has added a striking anti-debugging feature that detects security analysis and crashes researcher browsers before its malicious code can be analyzed. The new anti-debugging feature was discovered by Security Intelligence analysts with IBM, who reported the emergence of a...

Celebrating 20 Years of Trustworthy Computing

20 years ago this week, Bill Gates sent a now-famous email to all Microsoft employees announcing the creation of the Trustworthy Computing TwC initiative. The initiative was intended to put customer security, and ultimately customer trust, at the forefront for all Microsoft employees. Gates’ memo...

Celebrating 20 Years of Trustworthy Computing

20 years ago this week, Bill Gates sent a now-famous email to all Microsoft employees announcing the creation of the Trustworthy Computing TwC initiative. The initiative was intended to put customer security, and ultimately customer trust, at the forefront for all Microsoft employees. Gates’ memo...

Mattermost Boards Plugin Information Disclosure Vulnerability

Mattermost is an open source collaboration platform from Mattermost, Inc. The Mattermost Boards plugin in v0.10.0 and earlier is vulnerable to an information disclosure vulnerability that stems from a failure to protect all users' email addresses via one of the Board APIs, which could be exploite...

Mattermost Denial of Service Vulnerability

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. A denial of service vulnerability exists in Mattermost versions 6.2.0 and earlier, which arises from a failure to adequately process specially crafted GIF files when uploading them during the drafting ...

Pexip Infinity Denial of Service Vulnerability (CNVD-2022-06483)

Pexip Infinity is a video conferencing cloud collaboration platform from Pexip, a Norwegian company. Pexip Infinity has a security vulnerability that could be exploited by attackers to cause a denial of service...

Pexip Infinity Denial of Service Vulnerability (CNVD-2022-06484)

Pexip Infinity Pexip Video Conferencing Cloud Collaboration Platform is a video conferencing cloud collaboration platform from the Norwegian company Pexip. Pexip Infinity has a security vulnerability that could be exploited by attackers to remotely deny service...

Narthex - Modular Personalized Dictionary Generator

Narthex Greek: Νάρθηξ, νάρθηκας is a modular & minimal dictionary generator for Unix and Unix-like operating system written in C and Shell. It contains autonomous Unix-style programs for the creation of personalised dictionaries that can be used for password recovery & security assessment. The...

Learn about 4 approaches to comprehensive security that help leaders be fearless

The last 18 months have put unprecedented pressure on organizations to speed up their digital transformation as remote and hybrid work continue to become the new normal. Yet even with all the change and uncertainty, having the right security support system in place means your organization can sti...

Learn about 4 approaches to comprehensive security that help leaders be fearless

The last 18 months have put unprecedented pressure on organizations to speed up their digital transformation as remote and hybrid work continue to become the new normal. Yet even with all the change and uncertainty, having the right security support system in place means your organization can sti...

Align your security and network teams to Zero Trust security demands

The security community is continuously changing, growing, and learning from each other to better position the world against cyber threats. In the latest Voice of the Community blog series post, Microsoft Security Product Marketing Manager Natalia Godyla talks with Jennifer Minella, Founder and...

Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference

Synacor Zimbra Collaboration Suite ZCS contains an improper restriction of XML external entity XXE vulnerability in the mailboxd component...

BeyondTrust Remote Support Cross-Site Request Forgery Vulnerability

BeyondTrust Remote Support is a remote desktop access, help desk and collaboration software for Windows, Mac, Linux, Ios iPad, iPhone, etc. BeyondTrust Remote Support is vulnerable to cross-site request forgery. The vulnerability stems from the lack of proper validation of client-side data in the...

Microsoft SharePoint Elevation of Privilege Vulnerability (CNVD-2022-01686)

Microsoft Office Sharepoint Server is a U.S. Microsoft Microsoft company for enterprise customers and design, web-based content management and collaboration tools. The initial version of the software exists in the form of Office components, and now also still greatly dependent on Office to provid...

PT-2021-7280

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration Suite versions 8.8.15 and 9.0 Description The mboximport function allows an authenticated user with administrator rights to upload a ZIP archive containing arbitrary files. This can lead to directory traversal, which is a...