383 matches found
Poc_CVE-2025-68645
CVE-2025-68645 - Vulnerabilidad de Path Traversal en Zimbra 📋 Resumen CVE-2025-68645 es una vulnerabilidad de path traversal en Zimbra Collaboration Suite que permite a atacantes no autenticados leer archivos arbitrarios del sistema de archivos del servidor. Endpoint Vulnerable...
CVE-2025-68645
ZimLFI-Hunter CVE-2025-68645 ZimLFI-Hunter es un escáner profesional de Prueba de Concepto PoC diseñado para identificar la vulnerabilidad CVE-2025-68645 en Zimbra Collaboration Suite. Esta herramienta detecta fallos de Inclusión de Archivos Locales LFI a través del endpoint /h/printcalendar. 🛡️...
CVE-2022-27925
CVE-2022-27925 Descrizione Il 10 maggio 2022, Zimbra ha rilasciato le versioni 9.0.0 patch 24 e 8.8.15 patch 31 per affrontare multiple vulnerabilità in Zimbra Collaboration Suite, incluse CVE-2022-27924 di cui abbiamo scritto in precedenza e CVE-2022-27925. Inizialmente, Zimbra ha definito...
CVE-2026-73570
CVE-2026-73570 — Exploit RCE tramite notifica SNMP di Zimbra ZCS PoC Esecuzione remota di codice non autenticata tramite iniezione di comandi nel sistema operativo nel gestore delle notifiche SNMP di Zimbra Collaboration Suite. Panoramica...
CVE-2022-27925
CVE-2022-27925 描述 2022年5月10日，Zimbra发布了9.0.0补丁24和8.8.15补丁31，以修复Zimbra Collaboration Suite中的多个漏洞，包括CVE-2022-27924（我们之前写过）和CVE-2022-27925。...
CVE-2022-27925
CVE-2022-27925 Zimbra RCE 2022 यह रेपो hgrab-framework का हिस्सा है dork title: "Zimbra Web Client Sign In" प्रभावित उत्पाद Zimbra Collaboration Suite Network Edition 9.0.0 Patch 23 और पुराने Zimbra Collaboration Suite Network Edition 8.8.15 Patch 30 और पुराने स्थापना सर्वर पर ऐप स्थापित करें...
CVE-2025-68645
🛡️ CVE-2025-68645 - Zimbra 로컬 파일 포함 LFI 분석 📌 개요 이 문서는 Zimbra Collaboration Suite 에 영향을 미치는 로컬 파일 포함 LFI 취약점에 대해 설명합니다. 이 문제는 다음 매개변수의 부적절한 처리에서 발생합니다. root@kitploit: /h/?javax.servlet.include.servletpath= 이로 인해 인증되지 않은 사용자가 내부 애플리케이션 리소스에 접근할 수 있습니다. 🔍 취약점 세부 정보 유형: 로컬 파일 포함 LFI 접근: 인증되지 않음 영향을 받는...
CVE-2022-37042
CVE-2022-37042 Usage Visualizza informazioni sulla vulnerabilità. root@kitploit: go run main.go -s / / | / / / | \ / \ | \ | / / / // /| \ / / | | / / // // / / // // / / / / / / / // // / / / | |/ / /// // // / // /// / / / // / / / / |// ///// // /// // // @0xf4n9x WRN Use with caution. You...
Zimbra Collaboration Suite - Memcached Command Injection
Zimbra Collaboration Suite versions 8.8.15 and 9.0 contain a memcached command injection vulnerability that allows an unauthenticated attacker to inject arbitrary memcache commands into a targeted instance, leading to cache poisoning and potential credential theft. id: CVE-2022-27924 info: name:...
Vulnerability handling in Zimbra Collaboration Suite
Zimbra has identified a vulnerability in the Zimbra Collaboration Suite. This vulnerability exists in the Zimbra Collaboration Suite version 10.1.20. Unauthorized attackers can execute OS commands through specially crafted SMTP requests. This requires that the Zimbra SNMP package be installed and...
Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability
Zimbra Collaboration Suite ZCS contains an OS command injection vulnerability which could allow an unauthenticated attacker to send specially crafted SMTP requests that may result in execution of arbitrary operating system commands as the Zimbra user...
VulnCheck KEV: CVE-2018-14013
Synacor Zimbra Collaboration Suite Collaboration before 8.8.11 has XSS in the AJAX and html web clients...
The vulnerability of the Zimbra Collaboration Suite’s email management system, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.
The vulnerability of the Zimbra Collaboration Suite email management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
The vulnerability of the Zimbra Collaboration Suite’s corporate email management system, related to the， allows attackers to compromise the confidentiality and integrity of the protected information.
The vulnerability of the Zimbra Collaboration Suite email management system is related to the of inter-site requests. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...
Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
Synacor Zimbra Collaboration Suite ZCS contains a cross-site scripting vulnerability that could allow attackers to execute arbitrary JavaScript within the user's session, potentially leading to unauthorized access to sensitive information...
CVE-2026-33368
Zimbra Collaboration Suite ZCS 10.0 and 10.1 contains a reflected cross-site scripting XSS vulnerability in the Classic Webmail REST interface /h/rest. The application fails to properly sanitize user-supplied input, allowing an unauthenticated attacker to inject malicious JavaScript into a crafte...
PT-2026-27441
Name of the Vulnerable Software and Affected Versions Zimbra Collaboration Suite ZCS version 8.8.15 Description A security issue exists in the Zimbra Collaboration Suite ZCS PostJournal service that allows unauthenticated attackers to execute arbitrary system commands. This is possible due to...
编号撤回
Zimbra Collaboration Suite ZCS is an open-source collaboration suite developed by Zimbra Corporation. This product includes features such as WebMail, calendars, and contact management. The CVE number for this product has been withdrawn...
CVE-2026-33368
Zimbra Collaboration Suite ZCS 10.0 and 10.1 contains a reflected cross-site scripting XSS vulnerability in the Classic Webmail REST interface /h/rest. The application fails to properly sanitize user-supplied input, allowing an unauthenticated attacker to inject malicious JavaScript into a crafte...