391 matches found
CVE-2022-27925
CVE-2022-27925 Zimbra RCE 2022 This repo is part of the hgrab-framework dork title: "Zimbra Web Client Sign In" Affected product Zimbra Collaboration Suite Network Edition 9.0.0 Patch 23 and earlier Zimbra Collaboration Suite Network Edition 8.8.15 Patch 30 and earlier Installation Install the ap...
CVE-2022-27925
CVE-2022-27925 描述 2022 年 5 月 10 日，Zimbra 发布了 9.0.0 Patch 24 和 8.8.15 Patch 31，以解决 Zimbra Collaboration Suite 中的多个漏洞，包括 CVE-2022-27924（我们之前写过）和 CVE-2022-27925。 最初，Zimbra 将 CVE-2022-27925 称为认证路径遍历攻击，即管理员用户可以将文件写入文件系统上 Zimbra 账户下的任意目录。由于该漏洞最初被认为是仅限管理员利用的，NVD 为其分配了 7.8 的 CVSS 基础分数。后来，Volexity...
Poc_CVE-2025-68645
CVE-2025-68645 - Zimbra 路径遍历漏洞 📋 概述 CVE-2025-68645 是 Zimbra Collaboration Suite 中的一个路径遍历漏洞，允许未经身份验证的攻击者从服务器文件系统中读取任意文件。 漏洞端点 /h/printconversations?javax.servlet.include.servletpath= 🎯 影响 影响| 严重程度 ---|--- 未授权文件读取| 🔴 高 配置泄露| 🔴 高 凭证泄露| 🔴 高 内网映射| 🟠 中 📁 可读文件 🚀 用法 单目标扫描 python CVE-2025-68645.py.py -t...
CVE-2025-68645
ZimLFI-Hunter CVE-2025-68645 ZimLFI-Hunter es un escáner profesional de Prueba de Concepto PoC diseñado para identificar la vulnerabilidad CVE-2025-68645 en Zimbra Collaboration Suite. Esta herramienta detecta fallos de Inclusión de Archivos Locales LFI a través del endpoint /h/printcalendar. 🛡️...
Zimbra-CVE-2026-73570-Rules
Reglas de Wazuh para CVE-2026-73570 Inyección de comandos del sistema operativo en Zimbra Reglas de detección para CVE-2026-73570 , una inyección de comandos del sistema operativo en Zimbra Collaboration Suite a través del parámetro de notificación de trampas SNMP snmpnotify. Vulnerabilidad...
CVE-2026-73570
CVE-2026-73570 — Inyección de comandos del sistema operativo no autenticada en Zimbra zimbra-snmp PoC Prueba de concepto de exploit para CVE-2026-73570 , una inyección de comandos del sistema operativo no autenticada CWE-78, CVSS 8.9 en Zimbra Collaboration Suite Descargo de responsabilidad: Esta...
CVE-2026-73570
CVE-2026-73570 — Zimbra ZCS SNMP Notification RCE exploit PoC Unauthenticated Remote Code Execution via OS Command Injection in the Zimbra Collaboration Suite SNMP notification handler. Overview...
CVE-2022-37042
CVE-2022-37042 Uso Ver información de vulnerabilidad. root@kitploit: go run main.go -s / / | / / / | \ / \ | \ | / / / // /| \ / / | | / / // // / / // // / / / / / / / // // / / / | |/ / /// // // / // /// / / / // / / / / |// ///// // /// // // @0xf4n9x WRN Use with caution. You are...
CVE-2022-27925
CVE-2022-27925 描述 2022年5月10日，Zimbra发布了9.0.0补丁24和8.8.15补丁31，以修复Zimbra Collaboration Suite中的多个漏洞，包括CVE-2022-27924（我们之前写过）和CVE-2022-27925。...
Zimbra Collaboration Suite - Memcached Command Injection
Zimbra Collaboration Suite versions 8.8.15 and 9.0 contain a memcached command injection vulnerability that allows an unauthenticated attacker to inject arbitrary memcache commands into a targeted instance, leading to cache poisoning and potential credential theft. id: CVE-2022-27924 info: name:...
CVE-2025-68645
🛡️ CVE-2025-68645 - Análisis de Inclusión de Archivos Local LFI en Zimbra 📌 Resumen Este documento describe una vulnerabilidad de Inclusión de Archivos Local LFI que afecta a Zimbra Collaboration Suite. El problema surge por un manejo inadecuado del siguiente parámetro: root@kitploit:...
Zimbra Collaboration Suite 10.1.19 Command Injection
Zimbra Collaboration Suite versions 10.1.1 through 10.1.19 suffer from command injection via SMTP log poisoning. https://packetstorm.news/download/230686...
CVE-2026-73570
CVE-2026-73570 — Zimbra Collaboration Suite RCE Note: This repository contains an independent technical analysis and PoC reproduction of CVE-2026-73570. It is not the original vulnerability report. Zimbra Collaboration Suite RCE — SMTP log poisoning → swatchdog → OS Command Injection CVSS 8.9, CI...
Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite
Wazuh Rules CVE-2026-73570 Zimbra OS Command Injection Dete...
The vulnerability of the zimbra-snmp package in the Zimbra Collaboration Suite (ZCS) enterprise email management system allows a hacker to execute arbitrary code.
The vulnerability of the zimbra-snmp package in the Zimbra Collaboration Suite email management system is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite
CVE-2026-73570 PoC - SMTP Command Injection Tester A custom,...
Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite
CVE-2026-73570 CVE-2026-73570 PoC Morehttps://...
Vulnerability handling in Zimbra Collaboration Suite
Zimbra has identified a vulnerability in the Zimbra Collaboration Suite. This vulnerability exists in the Zimbra Collaboration Suite version 10.1.20. Unauthorized attackers can execute OS commands through specially crafted SMTP requests. This requires that the Zimbra SNMP package be installed and...
Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability
Zimbra Collaboration Suite ZCS contains an OS command injection vulnerability which could allow an unauthenticated attacker to send specially crafted SMTP requests that may result in execution of arbitrary operating system commands as the Zimbra user...
