https://vulnerability.circl.lu/sightings/feed 2026-07-11T15:04:26.575258+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/c4c2c654-d4c5-44e0-8f09-ccea2b7efb90/export 2026-07-11T15:04:26.594299+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "c4c2c654-d4c5-44e0-8f09-ccea2b7efb90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45519", "type": "seen", "source": "https://t.me/brutsecurity/976", "content": "https://yashsec.com/cves/cve-2024-45519-zimbra-unauthenticated-postjournal-rce/", "creation_timestamp": "2026-07-10T00:00:36.252694Z"} 2026-07-10T00:00:36.252694+00:00 https://vulnerability.circl.lu/sighting/4fddd2a9-fff8-4246-b829-bb28a9d7471a/export 2026-07-11T15:04:26.595597+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4fddd2a9-fff8-4246-b829-bb28a9d7471a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45519", "type": "seen", "source": "https://t.me/brutsecurity/976", "content": "https://yashsec.com/cves/cve-2024-45519-zimbra-unauthenticated-postjournal-rce/", "creation_timestamp": "2026-07-09T03:00:12.390078Z"} 2026-07-09T03:00:12.390078+00:00 https://vulnerability.circl.lu/sighting/ca791c74-ad1e-4622-8930-6255a3379486/export 2026-07-11T15:04:26.595726+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ca791c74-ad1e-4622-8930-6255a3379486", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45519", "type": "seen", "source": "https://t.me/ZerodayAlert/348", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0431\u0440\u0435\u0448\u044c \u0432 Zimbra \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043b\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0440\u0438\u0441\u043a\u0443 \u0432\u0437\u043b\u043e\u043c\u0430\n\n\u26a0\ufe0f \u041a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b Zimbra \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u0434\u0435\u043d\u044c \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-45519. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 postjournal \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u043f\u043e\u0434\u043c\u0435\u043d\u044f\u0442\u044c \u0430\u0434\u0440\u0435\u0441\u0430 \u0432 \u043f\u043e\u043b\u0435 CC. \n\n\ud83d\udd13 \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434. \u041e\u0431\u0445\u043e\u0434 \u0437\u0430\u0449\u0438\u0442\u044b \u0432\u043e\u0437\u043c\u043e\u0436\u0435\u043d \u0434\u0430\u0436\u0435 \u043d\u0430 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430. \n\n\ud83d\udee1 \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u0435\u043a \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b. \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f. \n\n#\u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0430 #\u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0439\u0441\u0435\u0440\u0432\u0435\u0440 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\n\n@ZerodayAlert", "creation_timestamp": "2026-07-07T00:00:06.382946Z"} 2026-07-07T00:00:06.382946+00:00 https://vulnerability.circl.lu/sighting/3cb22994-b713-4156-8d72-ed6aad2f34bc/export 2026-07-11T15:04:26.595850+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3cb22994-b713-4156-8d72-ed6aad2f34bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45519", "type": "seen", "source": "https://t.me/ZerodayAlert/348", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0431\u0440\u0435\u0448\u044c \u0432 Zimbra \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043b\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0440\u0438\u0441\u043a\u0443 \u0432\u0437\u043b\u043e\u043c\u0430\n\n\u26a0\ufe0f \u041a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b Zimbra \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u0434\u0435\u043d\u044c \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-45519. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 postjournal \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u043f\u043e\u0434\u043c\u0435\u043d\u044f\u0442\u044c \u0430\u0434\u0440\u0435\u0441\u0430 \u0432 \u043f\u043e\u043b\u0435 CC. \n\n\ud83d\udd13 \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434. \u041e\u0431\u0445\u043e\u0434 \u0437\u0430\u0449\u0438\u0442\u044b \u0432\u043e\u0437\u043c\u043e\u0436\u0435\u043d \u0434\u0430\u0436\u0435 \u043d\u0430 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430. \n\n\ud83d\udee1 \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u0435\u043a \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b. \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f. \n\n#\u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0430 #\u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0439\u0441\u0435\u0440\u0432\u0435\u0440 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\n\n@ZerodayAlert", "creation_timestamp": "2026-07-06T11:00:04.166976Z"} 2026-07-06T11:00:04.166976+00:00 https://vulnerability.circl.lu/sighting/bdb28629-e9ba-4d69-ad01-694c68f430c2/export 2026-07-11T15:04:26.595964+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "bdb28629-e9ba-4d69-ad01-694c68f430c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45518", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpvneubtik2l", "content": "\ud83d\udccc CVE-2024-45518 - An issue was discovered in Zimbra Collaboration (ZCS) 10.1.x before 10.1.1, 10.0.x before 10.0.9, 9.0.0 before Patch 41, and 8.8.15 before Patch 46. I... https://www.cyberhub.blog/cves/CVE-2024-45518", "creation_timestamp": "2026-07-05T13:07:06.593025Z"} 2026-07-05T13:07:06.593025+00:00 https://vulnerability.circl.lu/sighting/24511ada-1c09-42cb-9b62-bfaa96652025/export 2026-07-11T15:04:26.596061+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "24511ada-1c09-42cb-9b62-bfaa96652025", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45519", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d170f3af-2f50-498d-ad5e-d98ba65e68d6", "content": "", "creation_timestamp": "2026-06-23T14:05:59.069297Z"} 2026-06-23T14:05:59.069297+00:00 https://vulnerability.circl.lu/sighting/b8cd75b2-4f66-4a61-86a8-686ae4d7f0b5/export 2026-07-11T15:04:26.596157+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b8cd75b2-4f66-4a61-86a8-686ae4d7f0b5", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45519", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9b801d96-5180-4948-a2a7-db1a0080f3d8", "content": "", "creation_timestamp": "2026-06-19T12:46:34.090121Z"} 2026-06-19T12:46:34.090121+00:00 https://vulnerability.circl.lu/sighting/2ecfe12b-51e5-4abd-90f8-18fb130ff00a/export 2026-07-11T15:04:26.596254+00:00 Cédric Bonhomme https://cvepremium.circl.lu/user/cedric {"uuid": "2ecfe12b-51e5-4abd-90f8-18fb130ff00a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-45519", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ca550ce6-190e-460d-a052-c77cd8457862", "content": "", "creation_timestamp": "2026-02-02T12:26:27.312262Z"} 2026-02-02T12:26:27.312262+00:00 https://vulnerability.circl.lu/sighting/5d32a4dd-8b14-4fde-b22c-d90d576dc101/export 2026-07-11T15:04:26.597900+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "5d32a4dd-8b14-4fde-b22c-d90d576dc101", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45519", "type": "seen", "source": "MISP/f7787455-9994-4047-b6f7-77347597c104", "content": "", "creation_timestamp": "2025-08-26T18:36:20.000000Z"} 2025-08-26T18:36:20+00:00 https://vulnerability.circl.lu/sighting/4fb9c523-f809-4f5c-b885-94b5cf01134e/export 2026-07-11T15:04:26.598023+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4fb9c523-f809-4f5c-b885-94b5cf01134e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45516", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16407", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-45516\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in Zimbra Collaboration (ZCS) 9.0.0 before Patch 43, 10.0.x before 10.0.12, 10.1.x before 10.1.4, and 8.8.15 before Patch 47. A Cross-Site Scripting (XSS) vulnerability in the Zimbra Classic UI allows attackers to execute arbitrary JavaScript within the victim's session, potentially leading to unauthorized access to sensitive information. This issue arises from insufficient sanitization of HTML content, including malformed tags with embedded JavaScript. The vulnerability is triggered when the victim views a specially crafted email in the Classic UI, causing the malicious script to execute. No further user interaction is required beyond viewing the email.\n\ud83d\udccf Published: 2025-05-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-14T19:46:17.900Z\n\ud83d\udd17 References:\n1. https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories\n2. https://wiki.zimbra.com/wiki/Security_Center\n3. https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy\n4. https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.4#Security_Fixes", "creation_timestamp": "2025-05-14T20:32:37.000000Z"} 2025-05-14T20:32:37+00:00