Lucene search
K

11 matches found

Packet Storm
Packet Storm
•added 2026/01/29 12:0 a.m.•119 views

📄 Zimbra Collaboration Suite Postjournal 10.0.x Remote Code Execution

A critical vulnerability exists in the Zimbra Collaboration Suite ZCS PostJournal service that allows attackers to execute arbitrary system commands without authentication. The vulnerability is triggered through SMTP injection using a malicious RCPT TO parameter. This exploit provides full remote...

6.3AI score
Exploits0
Packet Storm
Packet Storm
•added 2025/12/08 12:0 a.m.•140 views

📄 Zimbra Collaboration Suite Postjournal 9.0.0 Remote Command Execution

A critical vulnerability exists in the Zimbra Collaboration Suite ZCS PostJournal service that allows attackers to execute arbitrary system commands without authentication. The vulnerability is triggered through SMTP injection using a malicious RCPT TO parameter. This exploit provides full remote...

8.5AI score
Exploits0
Packet Storm News
Packet Storm News
•added 2025/08/08 12:0 a.m.•2 views

Zimbra Postjournal Command Execution

CVE-2024-45519 is a vulnerability in Zimbra Collaboration ZCS that allows unauthenticated users to execute commands through the postjournal service. This guide walks you through setting up a lab environment to reproduce the issue and execute the exploit...

10CVSS7.3AI score0.94157EPSS
Exploits4
GithubExploit
GithubExploit
•added 2024/11/22 1:56 a.m.•223 views

Exploit for OS Command Injection in Zimbra Collaboration

CVE-2024-45519 CVE-2024-45519 is a high-risk vulnerability in...

10CVSS6.3AI score0.94157EPSS
Exploits4
CISA KEV Catalog
CISA KEV Catalog
•added 2024/10/03 12:0 a.m.•585 views

Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability

Synacor Zimbra Collaboration Suite ZCS contains an unspecified vulnerability in the postjournal service that may allow an unauthenticated user to execute commands...

10CVSS9.5AI score0.94157EPSS
In wildExploits4
NVD
NVD
•added 2024/10/02 10:15 p.m.•25 views

CVE-2024-45519

The postjournal service in Zimbra Collaboration ZCS before 8.8.15 Patch 46, 9 before 9.0.0 Patch 41, 10 before 10.0.9, and 10.1 before 10.1.1 sometimes allows unauthenticated users to execute commands...

10CVSS0.94157EPSS
Exploits4References8
OSV
OSV
•added 2024/10/02 10:15 p.m.•19 views

CVE-2024-45519

The postjournal service in Zimbra Collaboration ZCS before 8.8.15 Patch 46, 9 before 9.0.0 Patch 41, 10 before 10.0.9, and 10.1 before 10.1.1 sometimes allows unauthenticated users to execute commands...

9.8CVSS7.2AI score0.94157EPSS
Exploits4References8
ATTACKERKB
ATTACKERKB
•added 2024/10/02 12:0 a.m.•143 views

CVE-2024-45519

The postjournal service in Zimbra Collaboration ZCS before 8.8.15 Patch 46, 9 before 9.0.0 Patch 41, 10 before 10.0.9, and 10.1 before 10.1.1 sometimes allows unauthenticated users to execute commands. Recent assessments: ccondon-r7 at October 02, 2024 7:58pm UTC reported: This is one of a list o...

10CVSS10AI score0.94333EPSS
In wildExploits45References7
Vulnrichment
Vulnrichment
•added 2024/10/02 12:0 a.m.•24 views

CVE-2024-45519

The postjournal service in Zimbra Collaboration ZCS before 8.8.15 Patch 46, 9 before 9.0.0 Patch 41, 10 before 10.0.9, and 10.1 before 10.1.1 sometimes allows unauthenticated users to execute commands...

10CVSS7.2AI score0.94157EPSS
Exploits4References6
VulnCheck KEV
VulnCheck KEV
•added 2024/10/01 12:0 a.m.•0 views

VulnCheck KEV: CVE-2024-45519

Synacor Zimbra Collaboration Suite ZCS contains an unspecified vulnerability in the postjournal service that may allow an unauthenticated user to execute commands...

10CVSS5.9AI score0.94157EPSS
Exploits4References1
BDU FSTEC
BDU FSTEC
•added 2024/09/20 12:0 a.m.•2 views

The vulnerability of the Postjournal Service in the corporate email management system Zimbra Collaboration Suite allows a perpetrator to execute arbitrary commands.

The vulnerability of the Postjournal Service in the corporate email management system Zimbra Collaboration Suite is related to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute...

10CVSS6.2AI score0.94157EPSS
Exploits4References4Affected Software1
Rows per page
Query Builder