82 matches found
CVE-2023-25292
CVE-2023-25292 Reflected Cross Site Scripting XSS in Intermesh BV Group-Office version 6.6.145, allows attackers to gain escalated privileges and gain sensitive information via the GOLANGUAGE cookie Vulnerability Details Product: Group Office Application Version: 6.6.145 Vulnerability Type:...
CVE-2026-34838
CVE-2026-34838 PoC https://github.com/Intermesh/groupoffice/security/advisories/GHSA-h22j-frrf-5vxq...
CVE-2026-25512-PoC-Group-Office-Authenticated-RCE
CVE-2026-25512 PoC – Group-Office Authenticated RCE via TNEF Handler Author: Mohammed Idrees Banyamer Handle: @banyamersecurity GitHub: mbanyamer Date: February 04, 2026 Exploit Title Group-Office Intermesh 26.0.4 – Authenticated RCE via TNEF Attachment Handler CVE CVE-2026-25512 CWE CWE-78 OS...
CVE-2018-25438
Intermesh Group-Office 3.3.0 before 3.5.5 contains an unauthenticated path traversal vulnerability in compress.php that allows remote attackers to read arbitrary files by manipulating the 'file' parameter. Attackers can send GET requests to /compress.php with '../' sequences in the 'file'...
EUVD-2018-21962
Intermesh Group-Office 3.3.0 before 3.5.5 contains an unauthenticated path traversal vulnerability in compress.php that allows remote attackers to read arbitrary files by manipulating the 'file' parameter. Attackers can send GET requests to /compress.php with '../' sequences in the 'file'...
VulnCheck KEV: CVE-2018-25438
Intermesh Group-Office 3.3.0 before 3.5.5 contains an unauthenticated path traversal vulnerability in compress.php that allows remote attackers to read arbitrary files by manipulating the 'file' parameter. Attackers can send GET requests to /compress.php with '../' sequences in the 'file'...
CVE-2025-63406
An issue in Intermesh BV GroupOffice vulnerable before v.25.0.47 and 6.8.136 allows a remote attacker to execute arbitrary code via the dbToApi and eval in the FunctionField.php...
EUVD-2025-175371
An issue in Intermesh BV GroupOffice vulnerable before v.25.0.47 and 6.8.136 allows a remote attacker to execute arbitrary code via the dbToApi and eval in the FunctionField.php...
CVE-2025-63406
An issue in Intermesh BV GroupOffice vulnerable before v.25.0.47 and 6.8.136 allows a remote attacker to execute arbitrary code via the dbToApi and eval in the FunctionField.php...
CVE-2025-63406: Improper Neutralization of Special Elements used in a Command
An issue in Intermesh BV GroupOffice vulnerable before v.25.0.47 and 6.8.136 allows a remote attacker to execute arbitrary code via the dbToApi and eval in the FunctionField.php...
EUVD-2010-3426
Malware in sbrugna...
EUVD-2025-25453
Malicious code in bioql PyPI...
EUVD-2024-42719
Malicious code in bioql PyPI...
EUVD-2024-42716
Malicious code in bioql PyPI...
EUVD-2024-42718
Malicious code in bioql PyPI...
EUVD-2024-42717
Malicious code in bioql PyPI...
CVE-2025-53505
Group-Office versions prior to 6.8.119 and prior to 25.0.20 provided by Intermesh BV contain a path traversal vulnerability. If this vulnerability is exploited, information on the server hosting the product may be exposed...
CVE-2025-53505
Group-Office versions prior to 6.8.119 and prior to 25.0.20 provided by Intermesh BV contain a path traversal vulnerability. If this vulnerability is exploited, information on the server hosting the product may be exposed...
CVE-2025-53504
Group-Office versions prior to 6.8.119 and prior to 25.0.20 provided by Intermesh BV contain a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser...
CVE-2025-53504
Group-Office versions prior to 6.8.119 and prior to 25.0.20 provided by Intermesh BV contain a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser...