Zimbra Collaboration 10.0.x < 10.0.13 Stored Cross-Site Scripting

According to its banner, the version of Zimbra Collaboration running on the remote host is 10.0.x prior to 10.0.13 or 10.1.x prior to 10.1.5. It is, therefore, affected by a Stored Cross-Site Scripting XSS vulnerability due to insufficient sanitization of HTML content in ICS files. Note that the...

CVE-2025-9178

creationtimestamp| type| source ---|---|--- 2025-10-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-287-01...

EUVD-2020-29831

Malware in sbrugna...

EUVD-2016-6759

Malware in sbrugna...

EUVD-2016-6758

Malware in sbrugna...

EUVD-2016-6760

Malware in sbrugna...

Zimbra Zero-Day Exploited to Target Brazilian Military via Malicious ICS Files

A now patched security vulnerability in Zimbra Collaboration was exploited as a zero-day earlier this year in cyber attacks targeting the Brazilian military. Tracked as CVE-2025-27915 CVSS score: 5.4, the vulnerability is a stored cross-site scripting XSS vulnerability in the Classic Web Client...

EUVD-2022-35805

Malicious code in bioql PyPI...

EUVD-2023-58354

Malicious code in bioql PyPI...

EUVD-2024-44161

Malicious code in bioql PyPI...

EUVD-2023-50951

Malicious code in bioql PyPI...

EUVD-2024-51137

Malicious code in bioql PyPI...

EUVD-2023-58353

Malicious code in bioql PyPI...

EUVD-2025-2850

Malicious code in bioql PyPI...

CVE-2025-55069

creationtimestamp| type| source ---|---|--- 2025-09-23 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-266-01...

CVE-2025-9495

creationtimestamp| type| source ---|---|--- 2025-09-23 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-266-04 2025-09-23 20:03:51+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3lzjprnuzdw2f...

CVE-2025-55068

creationtimestamp| type| source ---|---|--- 2025-09-18 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-261-07 2025-09-18 21:23:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lz5bumc34x2m 2025-11-04 13:26:06+00:00| seen| https://t.me/icscert/1348...

CVE-2025-10394

A vulnerability has been found in fcbazzm ics-park Smart Park Management System 2.0. Affected is an unknown function of the file ruoyi-quartz/src/main/java/com/ruoyi/quartz/controller/JobController.java of the component Scheduled Task Module. Such manipulation leads to code injection. The attack...

fcba_zzm ics-park 代码注入漏洞

fcbazzm ics-park is a smart park management system from fcbazzm. A code injection vulnerability exists in fcbazzm ics-park version 2.0, which originates from a flaw in an unknown function in the file ruoyi-quartz/src/main/java/com/ruoyi/quartz/controller/JobController.java, which could lead to a...

fcba_zzm ics-park 代码问题漏洞

fcbazzm ics-park is an intelligent park management system from fcbazzm. A code issue vulnerability exists in version 2.0 of fcbazzm ics-park, which stems from the incorrect manipulation of the parameter File in the file FileUploadUtils.java, and could lead to arbitrary file uploads...