79 matches found
CVE-2026-25512-PoC-Group-Office-Authenticated-RCE
CVE-2026-25512 PoC – Group-Office ثغرة تنفيذ أوامر عن بُعد RCE عبر معالج TNEF المؤلف: محمد إدريس بن يامر الحساب: @banyamersecurity GitHub: mbanyamer التاريخ: 04 فبراير 2026 عنوان الاستغلال Group-Office Intermesh 26.0.4 – تنفيذ أوامر عن بُعد RCE عبر معالج مرفقات TNEF CVE CVE-2026-25512 CWE CWE-78...
CVE-2026-34838
CVE-2026-34838 PoC https://github.com/Intermesh/groupoffice/security/advisories/GHSA-h22j-frrf-5vxq...
CVE-2023-25292
CVE-2023-25292 ثغرة برمجة نصية عبر المواقع المنعكسة Reflected Cross Site Scripting في تطبيق Intermesh BV Group-Office الإصدار 6.6.145، تسمح للمهاجمين بالحصول على صلاحيات مرتفعة والوصول إلى معلومات حساسة عبر ملف تعريف الارتباط GOLANGUAGE تفاصيل الثغرة المنتج: Group Office Application الإصدار:...
CVE-2025-63406
An issue in Intermesh BV GroupOffice vulnerable before v.25.0.47 and 6.8.136 allows a remote attacker to execute arbitrary code via the dbToApi and eval in the FunctionField.php...
EUVD-2025-175371
An issue in Intermesh BV GroupOffice vulnerable before v.25.0.47 and 6.8.136 allows a remote attacker to execute arbitrary code via the dbToApi and eval in the FunctionField.php...
CVE-2025-63406: Improper Neutralization of Special Elements used in a Command
An issue in Intermesh BV GroupOffice vulnerable before v.25.0.47 and 6.8.136 allows a remote attacker to execute arbitrary code via the dbToApi and eval in the FunctionField.php...
CVE-2025-63406
An issue in Intermesh BV GroupOffice vulnerable before v.25.0.47 and 6.8.136 allows a remote attacker to execute arbitrary code via the dbToApi and eval in the FunctionField.php...
EUVD-2010-3426
Malware in sbrugna...
EUVD-2024-42717
Malicious code in bioql PyPI...
EUVD-2024-42719
Malicious code in bioql PyPI...
EUVD-2024-42718
Malicious code in bioql PyPI...
EUVD-2024-42716
Malicious code in bioql PyPI...
EUVD-2025-25453
Malicious code in bioql PyPI...
CVE-2025-53505
Group-Office versions prior to 6.8.119 and prior to 25.0.20 provided by Intermesh BV contain a path traversal vulnerability. If this vulnerability is exploited, information on the server hosting the product may be exposed...
CVE-2025-53505
Group-Office versions prior to 6.8.119 and prior to 25.0.20 provided by Intermesh BV contain a path traversal vulnerability. If this vulnerability is exploited, information on the server hosting the product may be exposed...
CVE-2025-53504
Group-Office versions prior to 6.8.119 and prior to 25.0.20 provided by Intermesh BV contain a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser...
CVE-2025-53504
Group-Office versions prior to 6.8.119 and prior to 25.0.20 provided by Intermesh BV contain a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser...
CVE-2025-53505: Improper Limitation of a Pathname to a Restricted Directory
Group-Office versions prior to 6.8.119 and prior to 25.0.20 provided by Intermesh BV contain a path traversal vulnerability. If this vulnerability is exploited, information on the server hosting the product may be exposed...
Intermesh BV Group Office 跨站脚本漏洞
Intermesh BV Group Office is an enterprise CRM and groupware tool from Intermesh BV open source. A cross-site scripting vulnerability exists in Intermesh BV Group Office versions prior to 6.8.123 and prior to 25.0.27, which stems from insufficient input cleanup and could lead to a reflective...
CVE-2024-47903
A vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber All versions V8.2.12, InterMesh 7707 Fire Subscriber All versions V7.2.12 only if the IP interface is enabled which is not the default configuration. The web server of affected devices allows to write arbitrary files to t...