Winter Vivern exploits zero-day vulnerability in Roundcube Webmail servers

ESET Research discover campaigns by the Winter Vivern APT group that exploit a zero-day XSS vulnerability in the Roundcube Webmail server and target governmental entities and a think tank in Europe.

#welivesecurity #ESET #2023 #EN #WinterVivern #APT #zero-day #XSS #vulnerability #Roundcube

·welivesecurity.com·Oct 27, 2023

Winter Vivern exploits zero-day vulnerability in Roundcube Webmail servers

Jenkins discloses dozens of zero-day bugs in multiple plugins

On Thursday, the Jenkins security team announced 34 security vulnerabilities affecting 29 plugins for the Jenkins open source automation server, 29 of the bugs being zero-days still waiting to be patched.

#bleepingcomputer #EN #2023 #CSRF #Jenkins #Vulnerability #XSS #Zero-Day #Security

·bleepingcomputer.com·Jan 5, 2023

Jenkins discloses dozens of zero-day bugs in multiple plugins

On Thursday, the Jenkins security team announced 34 security vulnerabilities affecting 29 plugins for the Jenkins open source automation server, 29 of the bugs being zero-days still waiting to be patched.

#bleepingcomputer #EN #2023 #CSRF #Jenkins #Vulnerability #XSS #Zero-Day #Security

·bleepingcomputer.com·Jan 5, 2023

Jenkins discloses dozens of zero-day bugs in multiple plugins