CVE-2024-35286

I've been analyzing newly disclosed vulnerabilities in popular systems, including Mitel MiCollab (CVE-2024-41713, CVE-2024-35286), Zyxel Firewalls (CVE-2024-11667), and Microsoft Windows (CVE-2024-35250, CVE-2024-49138). Ivanti is also affected (CVE-2025-0282, CVE-2025-0283).

Where There’s Smoke, There’s Fire 这篇报告深入剖析了 Mitel MiCollab 的 CVE-2024-35286、CVE-2024-41713 以及一个未公开的零日漏洞，揭示了该产品面临的严重安全风险。报告详细阐述了漏洞的成因、影响以及利用方式。 @watchtowrcyber Poc：https://t.co/mo7ePVwjgT https://t.co/Ew31fl5uKo

🚨 New @FortiGuardLabs Outbreak Alert: Security vulnerabilities in Mitel MiCollab have been uncovered, including CVE-2024-35286, CVE-2024-41713, and an arbitrary file read zero-day ⮕ https://t.co/ysYHPdG7Te https://t.co/UcndYU4blR

🚨 New @FortiGuardLabs Outbreak Alert: Security vulnerabilities in Mitel MiCollab have been uncovered, including CVE-2024-35286, CVE-2024-41713, and an arbitrary file read zero-day ⮕ https://t.co/tVABv1FIH0 https://t.co/LbU5Vd1iX4

🚨 New @FortiGuardLabs Outbreak Alert: Security vulnerabilities in Mitel MiCollab have been uncovered, including CVE-2024-35286, CVE-2024-41713, and an arbitrary file read zero-day ⮕ https://t.co/kPZJMm4eIG https://t.co/oW3bbD8G5a

🚨 New #FortiGuardLabs Outbreak Alert: Security vulnerabilities in Mitel MiCollab have been uncovered, including CVE-2024-35286, CVE-2024-41713, and an arbitrary file read zero-day ⮕ https://t.co/KMeN9xWHti https://t.co/rcmldpKPmq

Where There’s Smoke, There’s Fire - Mitel MiCollab CVE-2024-35286, CVE-2024-41713 And An 0day https://t.co/EESdexg8g6

#exploit 1. CVE-2024-46538: PfSense Stored XSS https://t.co/n9l7rTd3RF 2. CVE-2024-35286/41713: Mitel MiCollab SQLI / Path Traversal https://t.co/qtk8CPGTWx 3. CVE-2023-6200: Linux Kernel ICMPv6 Race Condtion https://t.co/gDhsyBkQLG

Top 5 Trending CVEs: 1 - CVE-2024-35286 2 - CVE-2024-3400 3 - CVE-2024-40834 4 - CVE-2024-43451 5 - CVE-2024-8636 #cve #cvetrends #cveshield #cybersecurity https://t.co/4Fua3CAN6W

csirt_it: #Mitel: disponibili PoC per le CVE-2024-41713, CVE-2024-35286 e per una vulnerabilità zero-day relative al prodotto #MiCollab Rischio: 🔴 Tipologia: 🔸Arbitrary File Read 🔸Authentication Bypass 🔸Data Manipulation 🔗 https://t.co/s9aH02PmWP… https://t.co/ttMr0Y0ZqI

CVE-2024-35286 & CVE-2024-41713:Critical Mitel MiCollab Flaw Exposes Systems to Unauthorized File and Admin Access thanks @watchtowrcyber for the POC... #bugbountytips #cve https://t.co/6L1j4mrP7T

🚨Alert🚨CVE-2024-35286 & CVE-2024-41713:Critical Mitel MiCollab Flaw Exposes Systems to Unauthorized File and Admin Access 🔥PoC: https://t.co/QZo7rhmCZN 🧐Deep Dive:https://t.co/3gIWyy7QfE 📊 14K+ Services are found on https://t.co/ysWb28BTvF yearly. 🔗Hunter Link:… https:/

Where There’s Smoke, There’s Fire - Mitel MiCollab CVE-2024-35286, CVE-2024-41713 And An 0day https://t.co/8Iqyd3smq8

Where There’s Smoke, There’s Fire - Mitel MiCollab CVE-2024-35286, CVE-2024-41713 And An 0day - watchTowr Labs https://t.co/6M2WpzsebG https://t.co/L43YZStK7e

👀 we’ve watched APTs recently ravage lawful interception systems, and wanted our own capabilities… Join us on a journey today into Mitel’s MiCollab - that originally started to reproduce CVE-2024-35286, and quickly unravelled into more… https://t.co/KSiASEB4Cm

CVE-2024-35286 A vulnerability in NuPoint Messenger (NPM) of Mitel MiCollab through 9.8.0.33 allows an unauthenticated attacker to conduct a SQL injection attack due to insufficient… https://t.co/hcukmyP5ZA

CVE-2024-35286 Unauthenticated SQL Injection Vulnerability in Mitel MiCollab NPM There is a SQL injection vulnerability in NuPoint Messenger (NPM) of Mitel MiCollab up to version 9.8.0.33. This is because user in... https://t.co/ueQFMTYGPZ