Lucene search
+L

388 matches found

Kitploit
Kitploit
added 2026/09/01 10:45 p.m.5 views

CVE-2022-27925

CVE-2022-27925 Zimbra RCE 2022 本仓库是 hgrab-framework 的一部分 dork title: "Zimbra Web Client Sign In" 受影响的产品 Zimbra Collaboration Suite Network Edition 9.0.0 Patch 23(及更早版本) Zimbra Collaboration Suite Network Edition 8.8.15 Patch 30(及更早版本) 安装 在服务器上安装该应用 root@kitploit: user@domain: git clone...

7.2CVSS7.3AI score0.98676EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/01 10:17 p.m.6 views

CVE-2022-27925

CVE-2022-27925 描述 2022 年 5 月 10 日,Zimbra 发布了 9.0.0 Patch 24 和 8.8.15 Patch 31,以解决 Zimbra Collaboration Suite 中的多个漏洞,包括 CVE-2022-27924(我们之前写过)和 CVE-2022-27925。 最初,Zimbra 将 CVE-2022-27925 称为认证路径遍历攻击,即管理员用户可以将文件写入文件系统上 Zimbra 账户下的任意目录。由于该漏洞最初被认为是仅限管理员利用的,NVD 为其分配了 7.8 的 CVSS 基础分数。后来,Volexity...

9.8CVSS7.4AI score0.98676EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/08/31 1:46 p.m.7 views

CVE-2022-37042

CVE-2022-37042 Usage 查看漏洞信息。 root@kitploit: go run main.go -s / / | / / / | \ / \ | \ | / / / // /| \ / / | | / / // // / / // // / / / / / / / // // / / / | |/ / /// // // / // /// / / / // / / / / |// ///// // /// // // @0xf4n9x WRN Use with caution. You are responsible for your actions. WRN...

9.8CVSS7.7AI score0.91893EPSS
SaveExploits8References2
Kitploit
Kitploit
added 2026/08/31 12:14 p.m.5 views

CVE-2022-27925

CVE-2022-27925 説明 2022年5月10日、Zimbraは、Zimbra Collaboration Suiteの複数の脆弱性に対処するため、バージョン9.0.0パッチ24および8.8.15パッチ31をリリースしました。これには、以前に取り上げたCVE-2022-27924とCVE-2022-27925が含まれます。...

7.5CVSS7.4AI score0.98676EPSS
SaveExploits14References1
Nuclei
Nuclei
added 2026/08/31 5:18 a.m.47 views

Zimbra Collaboration Suite - Memcached Command Injection

Zimbra Collaboration Suite versions 8.8.15 and 9.0 contain a memcached command injection vulnerability that allows an unauthenticated attacker to inject arbitrary memcache commands into a targeted instance, leading to cache poisoning and potential credential theft. id: CVE-2022-27924 info: name:...

7.5CVSS7.3AI score0.85398EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2026/08/29 8:57 a.m.7 views

CVE-2025-68645

🛡️ CVE-2025-68645 - Analisi di Inclusione Locale di File LFI in Zimbra 📌 Panoramica Questo documento descrive una vulnerabilità di Inclusione Locale di File LFI che interessa Zimbra Collaboration Suite. Il problema deriva da una gestione impropria del seguente parametro: root@kitploit:...

8.8CVSS7.4AI score0.49374EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/08/29 7:39 a.m.6 views

Poc_CVE-2025-68645

CVE-2025-68645 - Vulnerabilità di Path Traversal in Zimbra 📋 Panoramica CVE-2025-68645 è una vulnerabilità di path traversal in Zimbra Collaboration Suite che consente ad attacker non autenticati di leggere file arbitrari dal filesystem del server. Endpoint Vulnerabile...

8.8CVSS7.4AI score0.49374EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/08/28 6:01 p.m.12 views

Zimbra-CVE-2026-73570-Rules

Wazuh-Regeln CVE-2026-73570 Zimbra OS Command Injection Erkennungsregeln für CVE-2026-73570 , eine OS-Command-Injection in der Zimbra Collaboration Suite über den SNMP-Trap-Benachrichtigungsparameter snmpnotify. Schwachstelle...

8.9CVSS7.4AI score0.20528EPSS
SaveExploits7
GithubExploit
GithubExploit
added 2026/08/28 10:37 a.m.20 views

Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite

Wazuh Rules CVE-2026-73570 Zimbra OS Command Injection Dete...

8.9CVSS7.4AI score0.20528EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/08/28 6:03 a.m.5 views

CVE-2025-68645

ZimLFI-Hunter CVE-2025-68645 ZimLFI-Hunter è uno scanner Proof-of-Concept PoC professionale progettato per identificare la vulnerabilità CVE-2025-68645 in Zimbra Collaboration Suite. Questo strumento rileva i difetti di Local File Inclusion LFI attraverso l'endpoint /h/printcalendar. 🛡️ Panoramica...

8.8CVSS7.4AI score0.49374EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/08/27 11:05 a.m.5 views

CVE-2026-73570

CVE-2026-73570 — Exploit RCE tramite notifica SNMP di Zimbra ZCS PoC Esecuzione remota di codice non autenticata tramite iniezione di comandi nel sistema operativo nel gestore delle notifiche SNMP di Zimbra Collaboration Suite. Panoramica...

8.9CVSS8.4AI score0.20528EPSS
SaveExploits7
BDU FSTEC
BDU FSTEC
added 2026/08/26 12:00 a.m.19 views

The vulnerability of the zimbra-snmp package in the Zimbra Collaboration Suite (ZCS) enterprise email management system allows a hacker to execute arbitrary code.

The vulnerability of the zimbra-snmp package in the Zimbra Collaboration Suite email management system is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.9CVSS6.2AI score0.20528EPSS
SaveExploits7References5Affected Software1
GithubExploit
GithubExploit
added 2026/08/25 10:25 a.m.20 views

Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite

CVE-2026-73570 PoC - SMTP Command Injection Tester A custom,...

8.9CVSS7AI score0.20528EPSS
SaveExploits7
GithubExploit
GithubExploit
added 2026/08/24 11:55 a.m.19 views

Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite

CVE-2026-73570 CVE-2026-73570 PoC Morehttps://...

8.9CVSS5.5AI score0.20528EPSS
SaveExploits7
NCSC
NCSC
added 2026/08/23 11:12 a.m.14 views

Vulnerability handling in Zimbra Collaboration Suite

Zimbra has identified a vulnerability in the Zimbra Collaboration Suite. This vulnerability exists in the Zimbra Collaboration Suite version 10.1.20. Unauthorized attackers can execute OS commands through specially crafted SMTP requests. This requires that the Zimbra SNMP package be installed and...

8.9CVSS5.9AI score0.20528EPSS
SaveExploits7References3
CISA KEV Catalog
CISA KEV Catalog
added 2026/08/21 12:00 a.m.16 views

Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability

Zimbra Collaboration Suite ZCS contains an OS command injection vulnerability which could allow an unauthenticated attacker to send specially crafted SMTP requests that may result in execution of arbitrary operating system commands as the Zimbra user...

8.9CVSS6.3AI score0.20528EPSS
SaveIn wildExploits7
VulnCheck KEV
VulnCheck KEV
added 2026/08/06 12:00 a.m.11 views

VulnCheck KEV: CVE-2018-14013

Synacor Zimbra Collaboration Suite Collaboration before 8.8.11 has XSS in the AJAX and html web clients...

6.1CVSS6.1AI score0.07436EPSS
SaveIn wildExploits2References10
BDU FSTEC
BDU FSTEC
added 2026/06/08 12:00 a.m.10 views

The vulnerability of the Zimbra Collaboration Suite’s email management system, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Zimbra Collaboration Suite email management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

6.4CVSS5.5AI score0.00223EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/06/08 12:00 a.m.8 views

The vulnerability of the Zimbra Collaboration Suite’s corporate email management system, related to the, allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Zimbra Collaboration Suite email management system is related to the of inter-site requests. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

6.4CVSS5.8AI score0.00144EPSS
SaveExploits0References3Affected Software1
CISA KEV Catalog
CISA KEV Catalog
added 2026/04/20 12:00 a.m.27 views

Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability

Synacor Zimbra Collaboration Suite ZCS contains a cross-site scripting vulnerability that could allow attackers to execute arbitrary JavaScript within the user's session, potentially leading to unauthorized access to sensitive information...

6.1CVSS5.9AI score0.01682EPSS
SaveIn wildExploits0
Rows per page
Query Builder