CVE-2023-25292

CVE-2023-25292 I ntermesh BV Group-Office バージョン 6.6.145 における Reflected Cross Site Scripting XSS。攻撃者は GOLANGUAGE クッキーを介して権限を昇格させ、機密情報を取得することが可能です。 脆弱性の詳細 製品: Group Office アプリケーション バージョン: 6.6.145 脆弱性タイプ: Reflected XSS 深刻度: 中 CVSS v3.1 スコア: 6.1 AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 脆弱性の説明...

CVE-2026-25512-PoC-Group-Office-Authenticated-RCE

CVE-2026-25512 PoC – Group-Office 通过 TNEF 处理器实现认证 RCE 作者： Mohammed Idrees Banyamer 账号： @banyamersecurity GitHub： mbanyamer 日期： 2026 年 2 月 4 日 漏洞利用标题 Group-Office Intermesh 26.0.4 – 通过 TNEF 附件处理器实现认证 RCE CVE CVE-2026-25512 CWE CWE-78（操作系统命令注入） 厂商 Intermesh / Group-Office 受影响版本 26.0.4（同时影响部分 25.x /...

CVE-2026-34838

CVE-2026-34838 PoC https://github.com/Intermesh/groupoffice/security/advisories/GHSA-h22j-frrf-5vxq...

CVE-2025-63406

An issue in Intermesh BV GroupOffice vulnerable before v.25.0.47 and 6.8.136 allows a remote attacker to execute arbitrary code via the dbToApi and eval in the FunctionField.php...

EUVD-2025-175371

An issue in Intermesh BV GroupOffice vulnerable before v.25.0.47 and 6.8.136 allows a remote attacker to execute arbitrary code via the dbToApi and eval in the FunctionField.php...

CVE-2025-63406

An issue in Intermesh BV GroupOffice vulnerable before v.25.0.47 and 6.8.136 allows a remote attacker to execute arbitrary code via the dbToApi and eval in the FunctionField.php...

EUVD-2010-3426

Malware in sbrugna...

EUVD-2024-42716

Malicious code in bioql PyPI...

EUVD-2024-42719

Malicious code in bioql PyPI...

EUVD-2024-42718

Malicious code in bioql PyPI...

EUVD-2024-42717

Malicious code in bioql PyPI...

EUVD-2025-25453

Malicious code in bioql PyPI...

CVE-2025-53505

Group-Office versions prior to 6.8.119 and prior to 25.0.20 provided by Intermesh BV contain a path traversal vulnerability. If this vulnerability is exploited, information on the server hosting the product may be exposed...

CVE-2025-53505

Group-Office versions prior to 6.8.119 and prior to 25.0.20 provided by Intermesh BV contain a path traversal vulnerability. If this vulnerability is exploited, information on the server hosting the product may be exposed...

CVE-2025-53504

Group-Office versions prior to 6.8.119 and prior to 25.0.20 provided by Intermesh BV contain a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser...

CVE-2025-53504

Group-Office versions prior to 6.8.119 and prior to 25.0.20 provided by Intermesh BV contain a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser...

Intermesh BV Group Office 跨站脚本漏洞

Intermesh BV Group Office is an enterprise CRM and groupware tool from Intermesh BV open source. A cross-site scripting vulnerability exists in Intermesh BV Group Office versions prior to 6.8.123 and prior to 25.0.27, which stems from insufficient input cleanup and could lead to a reflective...

CVE-2024-47903

A vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber All versions V8.2.12, InterMesh 7707 Fire Subscriber All versions V7.2.12 only if the IP interface is enabled which is not the default configuration. The web server of affected devices allows to write arbitrary files to t...

CVE-2010-3428

SQL injection vulnerability in modules/notes/json.php in Intermesh Group-Office 3.5.9 allows remote attackers to execute arbitrary SQL commands via the categoryid parameter in a category action...

Intermesh BV Group Office CRM 安全漏洞

Intermesh BV Group Office CRM is an application from Intermesh BV. Share projects, calendars, files and emails online with colleagues and clients. Easy to use and fully customizable. A security vulnerability exists in Intermesh BV Group Office CRM versions prior to 6.8.119 and 25.0.20, which stem...