NewsProofpoint Threat Insight
ta458 roundpress exploits
This is part 2 of a 2-part blog series Proofpoint is publishing about Russian espionage actors using half-click exploits to target government webmail servers. Read part 1 about TA488 here, and the accompanying advisory from NSA here. Threat Research would like to thank the…
Teaser aus der Quelle
This is part 2 of a 2-part blog series Proofpoint is publishing about Russian espionage actors using half-click exploits to target government webmail servers. Read part 1 about TA488 here, and the accompanying advisory from NSA here. Threat Research would like to thank the…
Dies ist ein Anriss aus dem RSS-Feed. Den vollständigen Artikel lesen Sie beim Original.
Artikel bei Proofpoint Threat Insight lesenVerknüpfte Advisories
- CVE-2024-42900RuoYi: Cross-Site-Scripting (XSS)
- CVE-2024-42009Roundcube Webmail: Cross-Site-Scripting (XSS)
- CVE-2025-3929MDaemon Email Server: Cross-Site-Scripting (XSS)
- CVE-2025-49113Debian LTS roundcube: security update
- CVE-2025-49113Roundcube Webmail: RoundCube Webmail Deserialization of Untrusted Data Vulnerability
- CVE-2025-49113Debian roundcube: security update
- CVE-2026-8496Debian sogo: security update
- CVE-2025-27915Synacor Zimbra Collaboration Suite (ZCS): Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
- CVE-2024-42009Roundcube Webmail: Webmail Cross-Site Scripting Vulnerability
- CVE-2023-43770Roundcube Webmail: Cross-Site-Scripting (XSS)
- CVE-2026-8496SOGo: Cross-Site-Scripting (XSS)
- CVE-2024-42009Debian roundcube: security update
- CVE-2024-42900RuoYi: Cross-Site-Scripting (XSS)
- CVE-2026-8496SOGo: Cross-Site-Scripting (XSS)
- CVE-2023-43770Roundcube Webmail: Cross-Site-Scripting (XSS)
- CVE-2026-8496SOGo vulnerabilities
- CVE-2026-8496A cross-site scripting (XSS) vulnerability exists in Alinto SOGo, version 5.12.7. A maliciously crafted ICS calendar invitation files allows arbitrary JavaS…
- CVE-2023-43770BIT-roundcube-2023-43770
- CVE-2024-42009Roundcube Webmail: Cross-Site-Scripting (XSS)
- CVE-2025-3929MDaemon Email Server: Cross-Site-Scripting (XSS)
- CVE-2025-49113Roundcube Webmail Vulnerable to Authenticated RCE via PHP Object Deserialization
- CVE-2025-49113Roundcube Webmail: Deserialisierung nicht vertrauenswürdiger Daten
- CVE-2025-27915Synacor Zimbra Collaboration Suite (ZCS): Cross-Site-Scripting (XSS)
- CVE-2026-8496Debian LTS sogo: security update
- CVE-2025-49113Roundcube Webmail: Deserialisierung nicht vertrauenswürdiger Daten
- CVE-2024-42009Debian roundcube: security update
- CVE-2025-27915Synacor Zimbra Collaboration Suite (ZCS): Cross-Site-Scripting (XSS)
- CVE-2023-43770Roundcube Webmail Persistent Cross-Site Scripting (XSS)
Betroffene Hersteller und Produkte
Quelle: https://www.proofpoint.com/us/blog/threat-insight/ta458-roundpress-exploits
ID