- Sunday
- January 12th, 2025
Apache Superset is a popular open source data exploration and visualization tool. In a previous post, we disclosed a vulnerability, CVE-2023-27524, affecting thousands of Superset servers on the Internet, that enables unauthorized attackers to gain admin access to these servers....
Adam Bannister 01 June 2022 at 14:34 UTC Updated: 06 June 2022 at 12:56 UTC CSRF exploit requires person to open malicious e-mailA zero-day vulnerability in Horde Webmail allows attackers to take over the internet server and pivot to compromising...
A nonetheless unpatched vulnerability (CVE-2022-41352) in Zimbra Collaboration is being exploited by attackers to realize distant code execution on susceptible servers. About the vulnerability Zimbra Collaboration (previously Zimbra Collaboration Suite) is cloud-hosted collaboration software program suite that additionally consists of...
A extreme distant code execution vulnerability affected the Zimbra electronic mail shopper. The bug usually existed within the UnRAR library that might set off RCE on the Zimbra platform. Thankfully, the bug acquired a repair earlier than malicious exploitation. Zimbra...
OpenSMTPD has been discovered weak to yet one more essential vulnerability that would permit distant attackers to take full management over e mail servers working BSD or Linux working methods.OpenSMTPD, also called OpenBSD SMTP Server, is an open-source implementation of...
Msg spool assault menaceSecurity researchers at Qualys have uncovered a number of safety vulnerabilities in Exim, one of the crucial fashionable mail switch brokers used for public-facing email servers.During a full safety audit of Exim, the researchers discovered 21 vulnerabilities....