Announcements

TrueConf Server: TrueConf Server Code Injection Vulnerability

  • 22nd August 2026
A security flaw has been found in TrueConf Server that is a code injection vulnerability, meaning it lets malicious, specially crafted input run unauthorized commands on the affected system.If an unauthorized remote attacker can access your TrueConf Server instance via the 4307/TCP network port, they could use a specially built script to break out ...
Continue reading

Synacor Zimbra Collaboration Suite (ZCS): Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability

  • 22nd August 2026
A security flaw has been identified in the Zimbra Collaboration Suite (ZCS), a tool used for email, contact management, and team collaboration. This flaw is an operating system command injection vulnerability, which allows unauthorized actors to run unwanted, custom commands on the server where Zimbra is installed. The vulnerability can be ...
Continue reading

MA-1471.072026: MyCERT Advisory - Microsoft SharePoint Hardening After New Exploitations

  • 22nd August 2026
On 20 July 2026, Malaysia’s national cybersecurity agency MyCERT released a security advisory addressing newly observed, active exploitation attempts targeting Microsoft SharePoint. SharePoint is a widely used platform that organizations rely on to store, share, and collaborate on internal documents and team resources, so this alert is relevant ...
Continue reading