Zimbra Collaboration Suite (ZCS) XSS via CSS @import
Analysis of CVE-2025-66376, a cross-site scripting vulnerability in the Zimbra Collaboration Suite Classic UI triggered by malicious CSS directives in email HTML.
Read analysis →Vulnerability Assurance / Intelligence
Author: Vulnerability Assurance Research Desk
Microsoft SharePoint Remote Code Execution (CVE-2026-20963)
Analysis of CVE-2026-20963, a deserialization vulnerability in Microsoft SharePoint that allows unauthorized remote code execution over a network.
Read analysis →Validation Failures in Multi-Tier IP Geo-Blocking Controls
An OFAC enforcement action against TradeStation Securities reveals how logic errors in proprietary software and the failure of automated validation tools created a year-long exposure window for sanctioned jurisdictions.
Read analysis →Wing FTP Server Information Disclosure (CVE-2025-47813)
Analysis of CVE-2025-47813 in Wing FTP Server, where improper error handling during UID cookie processing can lead to sensitive information disclosure.
Read analysis →Chromium V8 Memory Buffer Vulnerability CVE-2026-3910
Analysis of a memory buffer vulnerability in the Chromium V8 engine that allows remote code execution within a sandbox via crafted HTML pages.
Read analysis →Google Skia Out-of-Bounds Write (CVE-2026-3909)
Analysis of a memory corruption vulnerability in the Google Skia library affecting Chrome, Android, and Flutter, focusing on exposure identification and remediation validation.
Read analysis →n8n Remote Code Execution via Workflow Expression Evaluation
Analysis of CVE-2025-68613, a vulnerability in n8n's workflow expression evaluation system that allows for remote code execution (RCE).
Read analysis →Omnissa Workspace One UEM SSRF (CVE-2021-22054)
Analysis of a Server-Side Request Forgery vulnerability in Omnissa Workspace One UEM that allows unauthenticated access to sensitive information for actors with network access.
Read analysis →SolarWinds Web Help Desk Remote Command Execution (CVE-2025-26399)
Analysis of CVE-2025-26399, a deserialization vulnerability in SolarWinds Web Help Desk used in ransomware campaigns, focusing on remediation and verification.
Read analysis →Ivanti Endpoint Manager Authentication Bypass (CVE-2026-1603)
Analysis of CVE-2026-1603 in Ivanti EPM, focusing on the risk of remote credential leakage via authentication bypass and strategies for verifying remediation.
Read analysis →