Exploit / PoCcritical

Nation State Hackers Exploiting Zero

The Hacker Newsby @TheHackersNewsOct 26, 2023 · 03:42 UTC (Oct 26, 2023)2 min read1 · 1 read

Read at thehackernews.com

Analyze CVE-2020-35730 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2020-35730 CVE-2023-5631

Tags: cve-2020-35730 cve-2023-5631 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2020-35730	Cross-Site Scripting in Roundcube Webmail Plain-Text Email Link Handling	6.1	33%	KEV	Dec 28, 2020 KEV Jun 22, 2023
CVE-2023-5631	Stored XSS in Roundcube Webmail exploited in the wild (CVE-2023-5631)	5.4	76%	KEVPoC	Oct 18, 2023 KEV Oct 26, 2023

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Oct 25, 2023 Threat Intelligence / Vulnerability The threat actor known as Winter Vivern has been observed exploiting a zero-day flaw in Roundcube webmail software on October 11, 2023, to harvest email messages from victims' accounts.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.