PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2022-30333] Các lỗ hổng mới liên tục xuất hiện trên Zimbra - Phần II

blog.viettelcybersecurity.com | vulnerability | CVE-2022-30333 | #rce | #path-traversal | #vulnerability-analysis | #zimbra | #cve-2022-30333 | #unrar
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Part two on Zimbra dissects CVE-2022-30333, an UnRAR path traversal: Windows-style symlinks inside RAR archives escape extraction, letting attackers drop a JSP webshell via Amavis and achieve RCE.
CVE
CVE-2022-30333
Published
Collected

Related coverage

research · blog.viettelcybersecurity.com
Các lỗ hổng mới liên tục xuất hiện trên Zimbra - Phần I
First part on Zimbra surveys the critical 2022 flaws (CVE-2022-27924, CVE-2022-27925, CVE-2022-30333, CVE-2022-37042) with patch timeline, noting 72,000+ exposed servers and wide use in Vietnam.
research · lab.ctbb.show
Write Path Traversal to a RCE Art Department
# Write Path Traversal to a RCE Art Department ~/authors/fsi - profile fsi * * * Diyan Apostolov Nov 28, 2025 CriticalThinking Research members are treated as artists thus here is my small and...
vulnerability · blog.viettelcybersecurity.com
CVE-2022-47966 SAML ShowStopper
Viettel dissects CVE-2022-47966: legacy xmlsec in ManageEngine products runs XSLT transforms during SAML signature verification, so a crafted SAMLResponse can trigger unauthenticated RCE.
vulnerability · blog.viettelcybersecurity.com
CVE-2022-21587 (Oracle E-Business Suite Unauthenticated RCE)
A walkthrough of CVE-2022-21587, unauthenticated RCE (CVSS 9.8) in Oracle EBS Web Applications Desktop Integrator's upload component, covering lab setup, EBS architecture and the vulnerable path.
vulnerability · blog.viettelcybersecurity.com
CVE-2022-1040 Sophos XG Firewall Authentication bypass
Analysis of Sophos XG Firewall CVE-2022-1040: mapping its Apache-Jetty-CSC-Perl architecture and the patch, whose JSON filter strips non-printable characters, exposing the parsing flaw.
vulnerability · blog.viettelcybersecurity.com
Cảnh báo chiến dịch khai thác lỗ hổng CVE-2022-1388 trên các hệ thống sử dụng F5 BIG-IP - Phần I
Part one explains CVE-2022-1388: an auth bypass in F5 BIG-IP iControl REST (CVSS 9.8) enabling unauthenticated RCE, dissecting how Apache forwards /mgmt requests to Jetty and token validation fails.
Back