2024-10-04
BleepingComputer
9 related
Researchers: hackers are actively exploiting an RCE vulnerability in Zimbra email servers, disclosed on September 27, triggered by emailing the SMTP server
When the mail server handles an email address with shell escape characters, the postjournal binary just shells out and runs whatever is specified. … Will Dormann / @wdormann@infosec.exchange : “Best e...
2024-10-03
BleepingComputer
10 related
Researchers: hackers are actively exploiting an RCE vulnerability in Zimbra email servers, disclosed on September 27, triggered by emailing the SMTP server
Hackers are actively exploiting a recently disclosed RCE vulnerability in Zimbra email servers that can be triggered simply …
2023-11-17
Engadget
4 related
Google finds and helps patch a Zimbra Collaboration email server zero-day used to steal data from governments in Greece, Moldova, Tunisia, Vietnam, and Pakistan
It links the attacks to past Chinese APT activity, but does not formally attribute the attacks. — It also points out that Winter Vivern (suspected Belarus) also exploited this after a patch was rele...
2023-11-16
Engadget
4 related
Google's Threat Analysis Group discovers and helps patch a Zimbra email server flaw used to steal data from governments in Greece, Moldova, and elsewhere
Google's threat analysis team discovered the security flaw in June. — Google's Threat Analysis Group revealed on Thursday …
Loading articles...