839 matches found
When Business Email Compromise Starts Rewriting Reality
Business Email Compromise BEC operates on a familiar playbook. Threat actors breach a mailbox, silently monitor operations, map approval chains, and ultimately exploit that access to divert funds or exfiltrate sensitive assets. This dynamic is central to our analysis as we kick off a series aroun...
Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite
CVE-2026-73570 — Zimbra zimbra-snmp Unauthenticated OS Command...
Zimbra Collaboration Suite 10.1.19 Command Injection
Zimbra Collaboration Suite versions 10.1.1 through 10.1.19 suffer from command injection via SMTP log poisoning. https://packetstorm.news/download/230686...
Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite
CVE-2026-73570 Zimbra — Collaboration Suite RCE --- Zimbra...
Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite
CVE-2026-73570 PoC - SMTP Command Injection Tester A custom,...
Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite
Wazuh Rules CVE-2026-73570 Zimbra OS Command Injection Dete...
The vulnerability of the zimbra-snmp package in the Zimbra Collaboration Suite (ZCS) enterprise email management system allows a hacker to execute arbitrary code.
The vulnerability of the zimbra-snmp package in the Zimbra Collaboration Suite email management system is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite
CVE-2026-73570 PoC - SMTP Command Injection Tester A custom,...
Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite
CVE-2026-73570 CVE-2026-73570 PoC Morehttps://...
Zimbra Collaboration Suite SNMP notification vulnerability
Added: 08/24/2026 Background Zimbra Collaboration Suite is an email, calendar, and collaboration solution for enterprises. Problem A vulnerability in Zimbra Collaboration Suite with SNMP notifications enabled could allow a remote attacker to execute arbitrary commands. Resolution Upgrade to Zimbr...
Vulnerability handling in Zimbra Collaboration Suite
Zimbra has identified a vulnerability in the Zimbra Collaboration Suite. This vulnerability exists in the Zimbra Collaboration Suite version 10.1.20. Unauthorized attackers can execute OS commands through specially crafted SMTP requests. This requires that the Zimbra SNMP package be installed and...
Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability
Zimbra Collaboration Suite ZCS contains an OS command injection vulnerability which could allow an unauthenticated attacker to send specially crafted SMTP requests that may result in execution of arbitrary operating system commands as the Zimbra user...
VulnCheck KEV: CVE-2018-14013
Synacor Zimbra Collaboration Suite Collaboration before 8.8.11 has XSS in the AJAX and html web clients...
The vulnerability of the Zimbra Collaboration Suite’s corporate email management system, related to the， allows attackers to compromise the confidentiality and integrity of the protected information.
The vulnerability of the Zimbra Collaboration Suite email management system is related to the of inter-site requests. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...
The vulnerability of the Zimbra Collaboration Suite’s email management system, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.
The vulnerability of the Zimbra Collaboration Suite email management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
Synacor Zimbra Collaboration Suite ZCS contains a cross-site scripting vulnerability that could allow attackers to execute arbitrary JavaScript within the user's session, potentially leading to unauthorized access to sensitive information...
CVE-2026-33368
Zimbra Collaboration Suite ZCS 10.0 and 10.1 contains a reflected cross-site scripting XSS vulnerability in the Classic Webmail REST interface /h/rest. The application fails to properly sanitize user-supplied input, allowing an unauthenticated attacker to inject malicious JavaScript into a crafte...
PT-2026-27441
Name of the Vulnerable Software and Affected Versions Zimbra Collaboration Suite ZCS version 8.8.15 Description A security issue exists in the Zimbra Collaboration Suite ZCS PostJournal service that allows unauthenticated attackers to execute arbitrary system commands. This is possible due to...
编号撤回
Zimbra Collaboration Suite ZCS is an open-source collaboration suite developed by Zimbra Corporation. This product includes features such as WebMail, calendars, and contact management. The CVE number for this product has been withdrawn...