Skip to content

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

← Live incidents

Oct 2, 2024

1 new incident, 1 with updates.

Started

  • ClosedPatched

    Synacor Zimbra Collaboration Suite (ZCS) Command Execution

    Synacor Zimbra Collaboration Suite (ZCS) contains an unspecified vulnerability in the postjournal service that may allow an unauthenticated user to execute commands. Added to the CISA KEV catalog on 2024-10-03.

    Synacor Zimbra Collaboration Suite (ZCS)Closed Oct 3, 2024

Updated

  • ClosedPatched

    Ivanti Endpoint Manager (EPM) SQL Injection

    Ivanti Endpoint Manager (EPM) contains a SQL injection vulnerability in Core server that allows an unauthenticated attacker within the same network to execute arbitrary code. Added to the CISA KEV catalog on 2024-10-02.

    Ivanti Endpoint Manager (EPM)Closed Oct 2, 2024