CVE-2025-68645

🛡️ CVE-2025-68645 - Análise de Inclusão de Arquivo Local LFI no Zimbra 📌 Visão Geral Este documento descreve uma vulnerabilidade de Inclusão de Arquivo Local LFI que afeta o Zimbra Collaboration Suite. O problema surge do tratamento inadequado do seguinte parâmetro: root@kitploit:...

CVE-2022-37042

CVE-2022-37042 Usage Ver informações sobre vulnerabilidade. root@kitploit: go run main.go -s / / | / / / | \ / \ | \ | / / / // /| \ / / | | / / // // / / // // / / / / / / / // // / / / | |/ / /// // // / // /// / / // / / / / |// ///// // /// // // @0xf4n9x WRN Use with caution. You are...

CVE-2022-27925

CVE-2022-27925 Zimbra RCE 2022 Dieses Repository ist Teil des hgrab-frameworks dork title: "Zimbra Web Client Sign In" Betroffenes Produkt Zimbra Collaboration Suite Network Edition 9.0.0 Patch 23 und früher Zimbra Collaboration Suite Network Edition 8.8.15 Patch 30 und früher Installation...

CVE-2022-27925

CVE-2022-27925 विवरण 10 मई, 2022 को, Zimbra ने Zimbra Collaboration Suite में कई कमजोरियों को दूर करने के लिए संस्करण 9.0.0 पैच 24 और 8.8.15 पैच 31 जारी किए, जिनमें CVE-2022-27924 जिसके बारे में हमने पहले लिखा था और CVE-2022-27925 शामिल हैं। मूल रूप से, Zimbra ने CVE-2022-27925 को एक प्रमाणित...

CVE-2022-27925

CVE-2022-27925 الوصف في 10 مايو 2022، أصدرت Zimbra الإصدارين 9.0.0 patch 24 و8.8.15 patch 31 لمعالجة العديد من الثغرات الأمنية في Zimbra Collaboration Suite، بما في ذلك CVE-2022-27924 التي كتبنا عنها سابقًا وCVE-2022-27925. في البداية، وصفت Zimbra ثغرة CVE-2022-27925 على أنها هجوم اجتياز مسار مصا...

Zimbra Collaboration Suite - Memcached Command Injection

Zimbra Collaboration Suite versions 8.8.15 and 9.0 contain a memcached command injection vulnerability that allows an unauthenticated attacker to inject arbitrary memcache commands into a targeted instance, leading to cache poisoning and potential credential theft. id: CVE-2022-27924 info: name:...

CVE-2025-68645

ZimLFI-Hunter CVE-2025-68645 ZimLFI-Hunter ist ein professioneller Proof-of-Concept PoC-Scanner zur Identifizierung der CVE-2025-68645 -Schwachstelle in der Zimbra Collaboration Suite. Dieses Tool erkennt Local File Inclusion LFI-Schwachstellen über den Endpunkt /h/printcalendar. 🛡️...

Vulnerability handling in Zimbra Collaboration Suite

Zimbra has identified a vulnerability in the Zimbra Collaboration Suite. This vulnerability exists in the Zimbra Collaboration Suite version 10.1.20. Unauthorized attackers can execute OS commands through specially crafted SMTP requests. This requires that the Zimbra SNMP package be installed and...

Poc_CVE-2025-68645

CVE-2025-68645 - Zimbra Path-Traversal-Schwachstelle 📋 Übersicht CVE-2025-68645 ist eine Path-Traversal-Schwachstelle in Zimbra Collaboration Suite , die nicht authentifizierten Angreifern das Lesen beliebiger Dateien vom Dateisystem des Servers ermöglicht. Verwundbarer Endpunkt...

Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability

Zimbra Collaboration Suite ZCS contains an OS command injection vulnerability which could allow an unauthenticated attacker to send specially crafted SMTP requests that may result in execution of arbitrary operating system commands as the Zimbra user...

VulnCheck KEV: CVE-2018-14013

Synacor Zimbra Collaboration Suite Collaboration before 8.8.11 has XSS in the AJAX and html web clients...

The vulnerability of the Zimbra Collaboration Suite’s email management system, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Zimbra Collaboration Suite email management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the Zimbra Collaboration Suite’s corporate email management system, related to the， allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Zimbra Collaboration Suite email management system is related to the of inter-site requests. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability

Synacor Zimbra Collaboration Suite ZCS contains a cross-site scripting vulnerability that could allow attackers to execute arbitrary JavaScript within the user's session, potentially leading to unauthorized access to sensitive information...

CVE-2026-33368

Zimbra Collaboration Suite ZCS 10.0 and 10.1 contains a reflected cross-site scripting XSS vulnerability in the Classic Webmail REST interface /h/rest. The application fails to properly sanitize user-supplied input, allowing an unauthenticated attacker to inject malicious JavaScript into a crafte...

CVE-2025-71275

...

PT-2026-27441

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration Suite ZCS version 8.8.15 Description A security issue exists in the Zimbra Collaboration Suite ZCS PostJournal service that allows unauthenticated attackers to execute arbitrary system commands. This is possible due to...

编号撤回

Zimbra Collaboration Suite ZCS is an open-source collaboration suite developed by Zimbra Corporation. This product includes features such as WebMail, calendars, and contact management. The CVE number for this product has been withdrawn...

CVE-2026-33368

Zimbra Collaboration Suite ZCS 10.0 and 10.1 contains a reflected cross-site scripting XSS vulnerability in the Classic Webmail REST interface /h/rest. The application fails to properly sanitize user-supplied input, allowing an unauthenticated attacker to inject malicious JavaScript into a crafte...

CVE-2026-33368

Zimbra Collaboration Suite ZCS 10.0 and 10.1 contains a reflected cross-site scripting XSS vulnerability in the Classic Webmail REST interface /h/rest. The application fails to properly sanitize user-supplied input, allowing an unauthenticated attacker to inject malicious JavaScript into a crafte...