Public
- Public
- Network
- Groups
- Featured
- Popular
- People

Conversation

Notices

Embed this notice
Aether ??? (aether@poa.st)'s status on Thursday, 03-Oct-2024 20:57:22 JST Aether ???

If you run a Zimbra server, which you probably don't, it's time you patched it.

arstechnica.com/security/2024/10/attackers-exploit-critical-vulnerability-recently-patched-in-zimbra-servers/

Nasty exploit in the wild.
In conversation about 5 months ago from poa.st permalink
Attachments
1. Domain not in remote thumbnail source whitelist: cdn.arstechnica.net
  
  Attackers exploit critical Zimbra vulnerability using cc’d email addresses
  
  When successful, attacks install a backdoor. Getting it to work reliably is another matter.
- Embed this notice
  Bread up, Bro (sickburnbro@poa.st)'s status on Thursday, 03-Oct-2024 20:57:22 JST Bread up, Bro
  in reply to
  
  @Aether "hosted there using the tool known as curl" has a "hacker known as 4chan" kind of feeling
  
  In conversation about 5 months ago permalink

Feeds