TrueConf Server contains a code injection vulnerability that could allow an unauthorized remote attacker with network access via port 4307/TCP to use a specially crafted script to break out of the isolated environment and execute arbitrary code on the host system.Source: CISA Known Exploited Vulnerabilities Catalog — ...
Continue reading
A security vulnerability has been found in Zimbra Collaboration Suite (ZCS), a tool many website owners use for team email, shared calendars, file storage, and other collaboration features. This flaw is an OS command injection issue, which lets bad actors trick the Zimbra software into running unauthorized commands on the server where Zimbra is ...
Continue reading
A MyCERT security advisory (reference number MA-1471.072026) focused on securing Microsoft SharePoint systems was published on 20 July 2026 at 9:43 am. The advisory was issued following new reports of attackers targeting the SharePoint platform, a tool many organizations use to build internal team sites, store shared documents, and manage ...
Continue reading
A security advisory was published on July 22, 2026, identifying a vulnerability in Microsoft Active Directory Federation Services (AD FS) related to insufficiently granular access controls. Access controls are the rules that restrict who can view or interact with different parts of a website or connected systems, and when these settings are not ...
Continue reading
