An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. An attacker can upload arbitrary files through amavisd via a cpio loophole that can lead to incorrect access to any other user accounts. 

A remote command execution vulnerability was found in the web interface of various Zyxel customized routers.

The vulnerability is due to improper sanitization of user-supplied input in the ssid1 parameter handled by the /userRpm/WlanNetworkRpm endpoint. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted HTTP request that injects shell commands, which the router's firmware executes with elevated privileges. Successful exploitation could lead to remote code execution on the affected device.

There is a missing authentication in sharepoint server. This vulnerability can be exploited to achieve RCE on SharePoint server.

Threat Encyclopedia

1231873

FILE Zimbra Archive Tar Arbitrary File Overwrite -2 (CVE-2022-41352)

Critical

2025/08/06

1133374

WEB Zyxel P660HN-T v1 Router Unauthenticated Remote Command Execution (CVE-2017-18368)

Critical

2025/08/06

1236888

WEB TP-Link Multiple Routers Command Injection Vulnerability (CVE-2023-33538)

High

2025/08/06

1236997

WEB Microsoft SharePoint Server Remote Code Execution Vulnerability -1 (CVE-2025-49704)

High

2025/08/06