Search: “Roundcube”

27 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Exploit / PoC 27 Threat actor 26 Vulnerability 25 Ransomware 12 Malware 8 Phishing & fraud 5 Data breach 3 Advisory 2

SeverityAll critical 77 high 16 medium 15 low 0 info 0

U.S. CISA adds Cisco ASA and FTD, and RoundCube Webmail bugs to its Known Exploited Vulnerabilities catalog

Security AffairsOct 25, 07:40 UTC · Oct 25, 2024Exploit / PoC in the wildCVE-2024-20481 CVE-2024-37383

60

U.S. CISA adds RoundCube Webmail flaws to its Known Exploited Vulnerabilities catalog

Security AffairsFeb 21, 11:19 UTC · Feb 21, 2026Exploit / PoC in the wildCVE-2025-49113 CVE-2025-68461

60

Winter Vivern APT exploited zero-day in Roundcube webmail software in recent attacks

Security AffairsOct 26, 05:20 UTC · Oct 26, 2023Exploit / PoC CVE-2020-35730 CVE-2022-27926 CVE-2023-5631

60

Winter Vivern: Zero-Day XSS Exploit Targets Roundcube Servers

Infosecurity MagazineOct 25, 17:00 UTC · Oct 25, 2023Exploit / PoC CVE-2020-35730 CVE-2023-5631

60

Roundcube Webmail under fire: critical exploit found after a decade

Security AffairsJun 4, 11:35 UTC · Jun 4, 2025Exploit / PoC CVE-2025-49113

60

CISA adds Roundcube Webmail Persistent XSS bug to its Known Exploited Vulnerabilities catalog

Security AffairsFeb 12, 18:54 UTC · Feb 12, 2024Exploit / PoC in the wildCVE-2023-43770 CVE-2020-35730

60

Roundcube webmail zero-day exploited to spy on government entities (CVE-2023-5631)

Help Net SecurityOct 25, 00:00 UTC · Oct 25, 2023Exploit / PoC CVE-2023-5631 CVE-2020-35730 CVE-2022-27926

60

Critical 10-Year-Old Roundcube Webmail Bug Allows Authenticated Users Run Malicious Code

The Hacker NewsJun 9, 12:15 UTC · Jun 9, 2025Exploit / PoC in the wildCVE-2025-49113 CVE-2024-37383

60

U.S. CISA adds RoundCube Webmail and Erlang Erlang/OTP SSH server flaws to its Known Exploited Vulnerabilities catalog

Security AffairsJun 10, 13:34 UTC · Jun 10, 2025Exploit / PoC in the wildCVE-2025-32433 CVE-2024-42009

60

CISA Adds Erlang SSH and Roundcube Flaws to Known Exploited Vulnerabilities Catalog

The Hacker NewsJun 12, 05:02 UTC · Jun 12, 2025Exploit / PoC in the wildCVE-2025-32433 CVE-2024-42009 CVE-2025-31022

60

CISA adds GeoSolutionsGroup JAI-EXT, Linux Kernel, and Roundcube Webmail bugs to its Known Exploited Vulnerabilities catalog

Security AffairsJun 27, 14:38 UTC · Jun 27, 2024Exploit / PoC in the wildCVE-2022-24816 CVE-2022-2586 CVE-2020-139651

60

CISA Adds Two Actively Exploited Roundcube Flaws to KEV Catalog

The Hacker NewsFeb 21, 07:21 UTC · Feb 21, 2026Exploit / PoC in the wildCVE-2025-49113 CVE-2025-68461

60

Nation State Hackers Exploiting Zero

The Hacker NewsOct 26, 03:42 UTC · Oct 26, 2023Exploit / PoC CVE-2020-35730 CVE-2023-5631

60

Pro-Russia hackers target inboxes with 0

Ars Technica · SecurityOct 25, 22:21 UTC · Oct 25, 2023Exploit / PoC CVE-2023-5631

60

Kremlin-linked hackers target webmail servers of Eastern European government agencies

The RecordMay 15, 14:13 UTC · May 15, 2025Exploit / PoC

60

Week in review: Microsoft fixes exploited zero-day, Mirai botnets target unpatched Wazuh servers

Help Net SecurityJun 15, 00:00 UTC · Jun 15, 2025Exploit / PoC in the wildCVE-2025-33053 CVE-2025-24016 CVE-2025-43200+1 CVEs

60

Multi-national warning issued over Russia’s targeting of logistics, tech firms

CyberScoopMay 21, 18:41 UTC · May 21, 2025Exploit / PoC in the wildCVE-2023-23397 CVE-2023-38831

60

Spies hack high-value mail servers using an exploit from yesteryear

Ars Technica · SecurityMay 15, 00:00 UTC · May 15, 2025Exploit / PoC CVE-2023-43770

60

Week in review: AnyDesk phishing campaign targets employees, Microsoft fixes exploited zero-days

Help Net SecurityFeb 18, 00:00 UTC · Feb 18, 2024Exploit / PoC in the wildCVE-2024-21762 CVE-2024-23313 CVE-2023-43770+5 CVEs1

60

CISA adds recently disclosed Apple flaws to its Known Exploited Vulnerabilities catalog

Security AffairsJun 23, 23:25 UTC · Jun 23, 2023Exploit / PoC in the wildCVE-2023-32434 CVE-2023-32435 CVE-2023-32439+6 CVEs

60

CISA says latest VMware analytics bug being exploited

The RecordJun 23, 12:17 UTC · Jun 23, 2023Exploit / PoC in the wildCVE-2023-20887 CVE-2016-9079 CVE-2016-0165

60

Zimbra Zero-Day Exploited to Target Brazilian Military via Malicious ICS Files

The Hacker NewsOct 10, 06:52 UTC · Oct 10, 2025Exploit / PoC in the wildCVE-2025-27915

60

⚡ Weekly Recap: Zero-Day Exploits, Insider Threats, APT Targeting, Botnets and More

The Hacker NewsMay 19, 14:35 UTC · May 19, 2025Exploit / PoC in the wildCVE-2025-30397 CVE-2025-30400 CVE-2025-32701+22 CVEs

60

China's elite hackers expand target list to European Union

CyberScoopNov 7, 10:00 UTC · Nov 7, 2024Exploit / PoC in the wild

60

Zero-Day Flaw in Zimbra Email Software Exploited by Four Hacker Groups

The Hacker NewsNov 17, 03:48 UTC · Nov 17, 2023Exploit / PoC CVE-2023-37580

60

France accuses Russian state hackers of targeting government systems, universities, think tanks

The RecordOct 27, 13:50 UTC · Oct 27, 2023Exploit / PoC CVE-2023-23397

60

Microsoft Warns of Widescale Credential Stealing Attacks by Russian Hackers

The Hacker NewsJun 27, 14:11 UTC · Jun 27, 2023Exploit / PoC CVE-2020-12641 CVE-2020-35730 CVE-2021-44026+1 CVEs

60