CVE-2022-27925

CVE-2022-27925 الوصف في 10 مايو 2022، أصدرت Zimbra الإصدارين 9.0.0 patch 24 و8.8.15 patch 31 لمعالجة العديد من الثغرات الأمنية في Zimbra Collaboration Suite، بما في ذلك CVE-2022-27924 التي كتبنا عنها سابقًا وCVE-2022-27925. في البداية، وصفت Zimbra ثغرة CVE-2022-27925 على أنها هجوم اجتياز مسار مصا...

jackhammer

Jackhammer: One Security vulnerability assessment/management tool to solve all the security team problems. What is Jackhammer? Jackhammer is a collaboration tool built with an aim of bridging the gap between Security team vs dev team, QA team and being a facilitator for TPM to understand and trac...

autopsy

Autopsy 4 http://www.sleuthkit.org/ 15 مارس 2016 نظرة عامة Autopsy هو واجهة رسومية لـ The Sleuth Kit وأدوات التحقيق الرقمي مفتوحة المصدر الأخرى. كان Autopsy 3 إعادة كتابة كاملة من Autopsy 2 لجعله قائمًا على Java. يمثل Autopsy 4 تحسينًا عن Autopsy 3 من خلال دعم التعاون على قضية واحدة من قبل عدة...

CVE-2026-73570

CVE-2026-73570 — استغلال RCE عبر إشعارات SNMP في Zimbra ZCS PoC تنفيذ كود عن بُعد غير مصادق عليه عبر حقن أوامر نظام التشغيل في معالج إشعارات SNMP في Zimbra Collaboration Suite. نظرة عامة...

Zimbra Collaboration (ZCS) - Cross Site Scripting

A reflected cross-site scripting XSS vulnerability in the /public/launchNewWindow.jsp component of Zimbra Collaboration aka ZCS 9.0 allows unauthenticated attackers to execute arbitrary web script or HTML via request parameters. id: CVE-2022-27926 info: name: Zimbra Collaboration ZCS - Cross Site...

Zimbra Collaboration - Cross-Site Scripting (XSS)

An issue was discovered in Zimbra Collaboration ZCS 9.0 and 10.0. A Cross-Site Scripting XSS vulnerability exists in the CalendarInvite feature of the Zimbra webmail classic user interface, because of improper input validation in the handling of the calendar header. An attacker can exploit this v...

Zimbra Collaboration Suite 8.8.15/9.0 - Remote Code Execution

Zimbra Collaboration Suite ZCS 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. By bypassing authentication i.e., not having an authtoken, an attacker can upload arbitrary files to the system, leading to directory traversal and remote code...

Zimbra Collaboration Suite - SSRF

Zimbra Collaboration Suite before 8.6 patch 13, 8.7.x before 8.7.11 patch 10, and 8.8.x before 8.8.10 patch 7 or 8.8.x before 8.8.11 patch 3 allows SSRF via the ProxyServlet component. id: CVE-2019-9621 info: name: Zimbra Collaboration Suite - SSRF author: riteshs4hu severity: high description: |...

Zimbra Collaboration Suite < 8.8.15 - Improper Encoding

An issue was discovered in the Calendar feature in Zimbra Collaboration Suite 8.8.x before 8.8.15 patch 30 update 1, as exploited in the wild starting in December 2021. An attacker could place HTML containing executable JavaScript inside element attributes. This markup becomes unescaped, causing...

CVE-2022-27925

CVE-2022-27925 描述 2022年5月10日，Zimbra发布了9.0.0补丁24和8.8.15补丁31，以修复Zimbra Collaboration Suite中的多个漏洞，包括CVE-2022-27924（我们之前写过）和CVE-2022-27925。...

CVE-2026-27579-CORS-Misconfiguration-Leading-to-Authenticated-Data-Exposure

CVE-2026-27579 – سوء تكوين CORS يؤدي إلى كشف بيانات مصادق عليها 📌 مرجع الاستشارة معرّف CVE: CVE-2026-27579 GHSA: GHSA-qh5m-p8jh-hx88 البائع: karnop المنتج: realtime-collaboration-platform الخطورة: عالية CVSS 7.4 المتجه: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N 🧠 نظرة عامة على الثغرة يحتوي مشر...

LinkScope_Client

LinkScope Client تنزيل برنامج التثبيت احصل على برنامج التثبيت الخاص بـ LinkScope Client من هنا: https://accentusoft.com/downloads/ الوصف هذا هو المستودع الخاص ببرنامج LinkScope Client للتحقيقات عبر الإنترنت. يتيح لك LinkScope إجراء تحقيقات عبر الإنترنت من خلال تمثيل المعلومات كقطع بيانات منفصلة...

CVE-2022-27925

CVE-2022-27925 Zimbra RCE 2022 यह रेपो hgrab-framework का हिस्सा है dork title: "Zimbra Web Client Sign In" प्रभावित उत्पाद Zimbra Collaboration Suite Network Edition 9.0.0 Patch 23 और पुराने Zimbra Collaboration Suite Network Edition 8.8.15 Patch 30 और पुराने स्थापना सर्वर पर ऐप स्थापित करें...

CVE-2025-68645

ZimLFI-Hunter CVE-2025-68645 ZimLFI-Hunter è uno scanner Proof-of-Concept PoC professionale progettato per identificare la vulnerabilità CVE-2025-68645 in Zimbra Collaboration Suite. Questo strumento rileva i difetti di Local File Inclusion LFI attraverso l'endpoint /h/printcalendar. 🛡️ Panoramica...

Pentest-Collaboration-Framework

Pentest Collaboration Framework Pentest Collaboration Framework - un toolkit open source, multipiattaforma e portatile per automatizzare i processi di routine nell'esecuzione di vari lavori di test! Esplora la documentazione » ‼️ Link importanti...

Pentest-Collaboration-Framework

Pentest Collaboration Framework Pentest Collaboration Framework - an opensource, cross-platform and portable toolkit for automating routine processes when carrying out various works for testing! Explore the docs » ‼️ Important Links...

CVE-2025-68645

🛡️ CVE-2025-68645 - Zimbra 로컬 파일 포함 LFI 분석 📌 개요 이 문서는 Zimbra Collaboration Suite 에 영향을 미치는 로컬 파일 포함 LFI 취약점에 대해 설명합니다. 이 문제는 다음 매개변수의 부적절한 처리에서 발생합니다. root@kitploit: /h/?javax.servlet.include.servletpath= 이로 인해 인증되지 않은 사용자가 내부 애플리케이션 리소스에 접근할 수 있습니다. 🔍 취약점 세부 정보 유형: 로컬 파일 포함 LFI 접근: 인증되지 않음 영향을 받는...

Agentic-SOC-Simulation

🛡️ Simulazione Parallela SOC Agentica ASPS: Centro di Simulazione Parallela per Operazioni di Sicurezza Autonome Ridefinire il futuro delle operazioni di sicurezza: simulazione parallela SOC full-stack, collaborazione multi-agente e difesa autonoma basata sui dati 🇨🇳 中文文档 Versione cinese Questo...

CVE-2022-41352

PoC CVE-2022-41352 Come funziona questo metodo di rilevamento? Come indicato negli advisory, è stato scoperto un problema in Zimbra Collaboration ZCS 8.8.15 e 9.0; il template controlla le seguenti versioni: root@kitploit: - "8.8.15" - "9.0" Come eseguo questo script? 1. Scarica Nuclei da qui 2...

heartwood

❤️🪵 Radicle Heartwood Protokoll & Stack Heartwood ist die dritte Iteration des Radicle-Protokolls, ein leistungsstarker Peer-to-Peer-Stack für Code-Zusammenarbeit und -Veröffentlichung. Das Repository enthält eine vollständige Implementierung von Heartwood, komplett mit einer benutzerfreundlichen...