Search: “Winter Vivern”

18 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Exploit / PoC 20 Vulnerability 12 Threat actor 11 Malware 5 Data breach 2 Ransomware 1 Advisory 1

SeverityAll critical 36 high 10 medium 6 low 0 info 0

Winter Vivern APT exploited zero-day in Roundcube webmail software in recent attacks

Security AffairsOct 26, 05:20 UTC · Oct 26, 2023Exploit / PoC CVE-2020-35730 CVE-2022-27926 CVE-2023-5631

60

Winter Vivern: Zero-Day XSS Exploit Targets Roundcube Servers

Infosecurity MagazineOct 25, 17:00 UTC · Oct 25, 2023Exploit / PoC CVE-2020-35730 CVE-2023-5631

60

Roundcube webmail zero-day exploited to spy on government entities (CVE-2023-5631)

Help Net SecurityOct 25, 00:00 UTC · Oct 25, 2023Exploit / PoC CVE-2023-5631 CVE-2020-35730 CVE-2022-27926

60

Nation State Hackers Exploiting Zero

The Hacker NewsOct 26, 03:42 UTC · Oct 26, 2023Exploit / PoC CVE-2020-35730 CVE-2023-5631

60

Kremlin-linked hackers target webmail servers of Eastern European government agencies

The RecordMay 15, 14:13 UTC · May 15, 2025Exploit / PoC

60

Pro-Russia hackers target inboxes with 0

Ars Technica · SecurityOct 25, 22:21 UTC · Oct 25, 2023Exploit / PoC CVE-2023-5631

60

U.S. CISA adds RoundCube Webmail flaws to its Known Exploited Vulnerabilities catalog

Security AffairsFeb 21, 11:19 UTC · Feb 21, 2026Exploit / PoC in the wildCVE-2025-49113 CVE-2025-68461

60

CISA Adds Two Actively Exploited Roundcube Flaws to KEV Catalog

The Hacker NewsFeb 21, 07:21 UTC · Feb 21, 2026Exploit / PoC in the wildCVE-2025-49113 CVE-2025-68461

60

Zimbra Zero-Day Exploited to Target Brazilian Military via Malicious ICS Files

The Hacker NewsOct 10, 06:52 UTC · Oct 10, 2025Exploit / PoC in the wildCVE-2025-27915

60

U.S. CISA adds RoundCube Webmail and Erlang Erlang/OTP SSH server flaws to its Known Exploited Vulnerabilities catalog

Security AffairsJun 10, 13:34 UTC · Jun 10, 2025Exploit / PoC in the wildCVE-2025-32433 CVE-2024-42009

60

Critical 10-Year-Old Roundcube Webmail Bug Allows Authenticated Users Run Malicious Code

The Hacker NewsJun 9, 12:15 UTC · Jun 9, 2025Exploit / PoC in the wildCVE-2025-49113 CVE-2024-37383

60

Roundcube Webmail under fire: critical exploit found after a decade

Security AffairsJun 4, 11:35 UTC · Jun 4, 2025Exploit / PoC CVE-2025-49113

60

Zero-days exploited in the wild jumped 50% in 2023, fueled by spyware vendors

The RecordMar 27, 01:56 UTC · Mar 27, 2024Exploit / PoC in the wildCVE-2023-4863 CVE-2023-41064 CVE-2023-5217

60

CISA adds Roundcube Webmail Persistent XSS bug to its Known Exploited Vulnerabilities catalog

Security AffairsFeb 12, 18:54 UTC · Feb 12, 2024Exploit / PoC in the wildCVE-2023-43770 CVE-2020-35730

60

Zero-Day Flaw in Zimbra Email Software Exploited by Four Hacker Groups

The Hacker NewsNov 17, 03:48 UTC · Nov 17, 2023Exploit / PoC CVE-2023-37580

60

Zimbra zero-day exploited to steal government emails by 4 groups

Security AffairsNov 16, 20:49 UTC · Nov 16, 2023Exploit / PoC CVE-2023-37580

60

Hackers target Greece, Tunisia, Moldova, Vietnam and Pakistan with Zimbra zero

The RecordNov 16, 17:06 UTC · Nov 16, 2023Exploit / PoC CVE-2023-37580 CVE-2022-24682

60

Hackers with links to Pro-Russian groups compromised foreign embassies in Belarus, researchers say

CyberScoopAug 10, 09:30 UTC · Aug 10, 2023Exploit / PoC in the wild

60