Lucene search
+L

1736 matches found

Kitploit
Kitploit
added 2026/09/13 6:30 a.m.7 views

Zimbra-RCE

Zimbra-RCE Zimbra RCE CVE-2019-9670 root@kitploit: $ ./zimbra.py -h . . \ /|| \ | \ \ \ / / / | |/ | \ \ \ | / \ / | / / | | Y Y \ \ \ | // \ | | \ | \ / |||| / /| / || /\ / / / / / / / / / usage: zimbra.py -h -u URL -d DTD -n PAYLOADNAME -f PAYLOADFILE Zimbra RCE CVE-2019-9670...

9.8CVSS8.2AI score0.99986EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/13 1:53 a.m.9 views

cve-2022-41352-zimbra-rce

CVE-2022-41352 Zimbra RCE No Autenticado CVE-2022-41352 es una vulnerabilidad de escritura arbitraria de archivos en servidores de correo Zimbra debido al uso de una versión vulnerable de cpio. CVE-2022-41352 NIST.gov CVE-2022-41352 Análisis de Rapid7 Versiones de Zimbra afectadas: Zimbra 9.0.0.p...

9.8CVSS8.6AI score0.95478EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/12 11:33 p.m.5 views

CVE-2022-27925

Zimbra Unauthenticated Remote Code Execution Exploit CVE-2022-27925...

7.2CVSS8AI score0.98676EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/12 10:49 p.m.8 views

Zimbra-RCE

Zimbra-RCE Zimbra RCE CVE-2019-9670 root@kitploit: $ ./zimbra.py -h . . \ /|| \ | \ \ \ / / / | |/ | \ \ \ | / \ / | / / | | Y Y \ \ \ | // \ | | \ | \ / |||| / /| / || /\ / / / / / / / / / usage: zimbra.py -h -u URL -d DTD -n PAYLOADNAME -f PAYLOADFILE Zimbra RCE CVE-2019-9670...

9.8CVSS8.2AI score0.99986EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/12 10:42 p.m.7 views

CVE-2022-27925

CVE-2022-27925 Zimbra RCE 2022 This repo is part of the hgrab-framework dork title: "Zimbra Web Client Sign In" Affected product Zimbra Collaboration Suite Network Edition 9.0.0 Patch 23 and earlier Zimbra Collaboration Suite Network Edition 8.8.15 Patch 30 and earlier Installation Install the ap...

7.2CVSS8.2AI score0.98676EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/12 8:44 p.m.5 views

CVE-2024-45519-Zimbra-Real-Fix

CVE-2024-45519-Zimbra-Real-Fix Zimbra CVE-2024-45519 real fix - Official patch is incomplete CVE-2024-45519 - Zimbra Real Fix ⚠️ Warning CVE-2024-45519 is a critical RCE vulnerability CVSS 9.8 in Zimbra Collaboration Suite. Many administrators think they are not protected after applying the...

10CVSS8.3AI score0.99907EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/12 3:58 p.m.6 views

CVE-2024-45519

CVE-2024-45519 Zimbra CVE-2024-45519...

10CVSS8.9AI score0.99907EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/12 2:32 p.m.5 views

CVE-2022-37042

CVE-2022-37042 Plantilla armada de Nuclei para Zimbra CVE-2022-37042 ruta del shell: /public/formatter.jsp Nuclei en sí: https://github.com/projectdiscovery/nuclei el shell tiene una entrada oculta con opacidad 0, así que simplemente pasa el ratón sobre ella, escribe el comando y pulsa la tecla...

9.8CVSS8.5AI score0.91893EPSS
SaveExploits8References1
Kitploit
Kitploit
added 2026/09/12 2:15 p.m.10 views

ZimbraExploit

ZimbraExploit K8Cscan invoca la vulnerabilidad de ejecución remota de código de Zimbra8.8.11 para GetShell https://www.cnblogs.com/k8gege/p/10822908.html CVE-2019-9621 Zimbra8.8.11 XXE GetShell Exploit...

7.5CVSS7.5AI score0.81037EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/12 1:57 p.m.4 views

CVE-2022-27925-PoC

CVE-2022-27925-PoC Zimbra RCE PoC simple...

7.2CVSS8.1AI score0.98676EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/12 1:52 p.m.9 views

CVE-2022-27925

CVE-2022-27925 Description On May 10, 2022, Zimbra released versions 9.0.0 patch 24 and 8.8.15 patch 31 to address multiple vulnerabilities in Zimbra Collaboration Suite, including CVE-2022-27924 which we wrote about previously and CVE-2022-27925. Originally, Zimbra called CVE-2022-27925 an...

7.2CVSS8.1AI score0.98676EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/12 12:57 p.m.6 views

zimbramail-CVE-2025-68645-poc

zimbramail-CVE-2025-68645-poc Una prueba de concepto que explota una vulnerabilidad de inclusión de archivos locales LFI existente en la interfaz de usuario clásica de Webmail de Zimbra Collaboration ZCS 10.0 y 10.1 debido al manejo inadecuado de los parámetros de solicitud proporcionados por el...

8.8CVSS8.1AI score0.49374EPSS
SaveExploits6References2
Kitploit
Kitploit
added 2026/09/12 11:59 a.m.11 views

CVE-2022-30333-PoC

CVE-2022-30333-POC Archivo de muestra para probar CVE-2022-30333 Sample.rar : si quieres probar en Linux. Al extraerlo, crea trav en ../../tmp/traversed. Asegúrate de que el directorio ../../tmp/traversed exista antes de extraer Sample.rar exp.rar : si quieres probar en el servidor de correo...

7.5CVSS7AI score0.99085EPSS
SaveExploits12References2
Kitploit
Kitploit
added 2026/09/12 7:50 a.m.9 views

Zimbra

Explotación Activa Sobre Zimbra CVE-2022-37042 RCE Unauthenticated La siguiente investigación inicio tratando de entender las POC de varios repositorios en GitHub que compartieron muchos investigadores y termino en una sorpresa interesante, que compartiré en los siguientes parrafos. El 10 de agos...

9.8CVSS8.4AI score0.91893EPSS
SaveExploits8
Nuclei
Nuclei
added 2026/09/12 2:04 a.m.77 views

Zimbra Collaboration (ZCS) - Cross Site Scripting

A reflected cross-site scripting XSS vulnerability in the /public/launchNewWindow.jsp component of Zimbra Collaboration aka ZCS 9.0 allows unauthenticated attackers to execute arbitrary web script or HTML via request parameters. id: CVE-2022-27926 info: name: Zimbra Collaboration ZCS - Cross Site...

6.1CVSS7AI score0.17634EPSS
SaveExploits0References5
Nuclei
Nuclei
added 2026/09/12 2:04 a.m.29 views

Zimbra Collaboration - Cross-Site Scripting (XSS)

An issue was discovered in Zimbra Collaboration ZCS 9.0 and 10.0. A Cross-Site Scripting XSS vulnerability exists in the CalendarInvite feature of the Zimbra webmail classic user interface, because of improper input validation in the handling of the calendar header. An attacker can exploit this v...

6.1CVSS7AI score0.23632EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/09/12 2:04 a.m.79 views

Synacor Zimbra Collaboration Suite Collaboration <8.8.11 - Cross-Site Scripting

Synacor Zimbra Collaboration Suite Collaboration before 8.8.11 is vulnerable to cross-site scripting via the AJAX and html web clients. id: CVE-2018-14013 info: name: Synacor Zimbra Collaboration Suite Collaboration 8.8.11 - Cross-Site Scripting author: pikpikcu severity: medium description:...

6.1CVSS6.2AI score0.07436EPSS
SaveExploits2References5
Nuclei
Nuclei
added 2026/09/12 2:04 a.m.69 views

Zimbra Collaboration Suite (ZCS) v.8.8.15 - Cross-Site Scripting

Cross Site Scripting vulnerability in Zimbra ZCS v.8.8.15 allows a remote authenticated attacker to execute arbitrary code via a crafted script to the /h/autoSaveDraft function. id: CVE-2023-34192 info: name: Zimbra Collaboration Suite ZCS v.8.8.15 - Cross-Site Scripting author: ritikchaddha...

9CVSS8.8AI score0.77266EPSS
SaveExploits0References5
Nuclei
Nuclei
added 2026/09/12 2:04 a.m.39 views

Zimbra - Cross-Site Scripting via ICS Files

Detects Zimbra Collaboration Suite versions vulnerable to CVE-2025-27915, a stored XSS vulnerability in the Classic Web Client due to insufficient sanitization of HTML content in ICS files. When a user views an email with a malicious ICS entry, embedded JavaScript executes via an ontoggle event...

5.4CVSS6.7AI score0.03986EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/09/12 2:04 a.m.28 views

Zimbra Collaboration Suite - Cross-site Scripting

Cross-site scripting XSS vulnerability in the ZmMailMsgView.getAttachmentLinkHtml function in Zimbra Collaboration Suite ZCS before 8.7 Patch 1 and 8.8.x before 8.8.7 might allow remote attackers to inject arbitrary web script or HTML via a Content-Location header in an email attachment. id:...

6.1CVSS7.2AI score0.25268EPSS
SaveExploits2References2
Rows per page
Query Builder