LR pixel

Zimbra Collaboration Local File Inclusion

von | 29. Jan. 2026 | Unkategorisiert

What is the Vulnerability? A Local File Inclusion (LFI) vulnerability (CVE-2025-68645) exists in the Zimbra Collaboration Suite (ZCS) Webmail Classic UI due to improper handling of user-supplied request parameters in the RestFilter servlet. An unauthenticated remote...

SmarterTools SmarterMail RCE

von | 28. Jan. 2026 | Unkategorisiert

What is the Vulnerability? An actively targeted vulnerability has been identified in SmarterTools SmarterMail, tracked as CVE-2025-52691, with a CVSS score of 10.0 (Critical). The flaw allows unauthenticated attackers to upload arbitrary files to any location on the...

UAT-8837 Critical Infrastructure Attack

von | 17. Jan. 2026 | Unkategorisiert

What is the Attack? An active campaign has been linked, with medium confidence, to a threat actor designated UAT-8837, which Cisco Talos assesses as a China-nexus group targeting critical infrastructure organizations in North America. Observed activity includes...

n8n Unauthenticated Remote Code Execution

von | 8. Jan. 2026 | Unkategorisiert

What is the Vulnerability? CVE-2026-21858 arises from a Content-Type confusion flaw in n8n’s webhook and form handling logic. Specifically, certain form-based workflows do not adequately validate or enforce multipart form content types, allowing attackers to override...

MongoBleed Unauthenticated Memory Leak

von | 30. Dez. 2025 | Unkategorisiert

What is the Vulnerability? A critical vulnerability in MongoDB Server’s handling of zlib-compressed network traffic allows a fully unauthenticated remote attacker to read uninitialized heap memory and leak sensitive data directly from server memory. The flaw stems...