Zimbra-CVE-2026-73570-Rules

Reglas de Wazuh para CVE-2026-73570 Inyección de comandos del sistema operativo en Zimbra Reglas de detección para CVE-2026-73570 , una inyección de comandos del sistema operativo en Zimbra Collaboration Suite a través del parámetro de notificación de trampas SNMP snmpnotify. Vulnerabilidad...

CVE-2026-73570

CVE-2026-73570 — Zimbra ZCS SNMP Notification RCE exploit PoC Unauthenticated Remote Code Execution via OS Command Injection in the Zimbra Collaboration Suite SNMP notification handler. Overview...

Zimbra Collaboration Suite - Memcached Command Injection

Zimbra Collaboration Suite versions 8.8.15 and 9.0 contain a memcached command injection vulnerability that allows an unauthenticated attacker to inject arbitrary memcache commands into a targeted instance, leading to cache poisoning and potential credential theft. id: CVE-2022-27924 info: name:...

CVE-2025-68645

ZimLFI-Hunter CVE-2025-68645 ZimLFI-Hunter es un escáner profesional de Prueba de Concepto PoC diseñado para identificar la vulnerabilidad CVE-2025-68645 en Zimbra Collaboration Suite. Esta herramienta detecta fallos de Inclusión de Archivos Locales LFI a través del endpoint /h/printcalendar. 🛡️...

CVE-2022-27925

CVE-2022-27925 Zimbra RCE 2022 Este repositorio es parte del hgrab-framework dork title: "Zimbra Web Client Sign In" Producto afectado Zimbra Collaboration Suite Network Edition 9.0.0 Patch 23 y anteriores Zimbra Collaboration Suite Network Edition 8.8.15 Patch 30 y anteriores Instalación Instale...

CVE-2022-27925

CVE-2022-27925 Descripción El 10 de mayo de 2022, Zimbra publicó las versiones 9.0.0 parche 24 y 8.8.15 parche 31 para abordar múltiples vulnerabilidades en Zimbra Collaboration Suite, incluyendo CVE-2022-27924 sobre la que escribimos anteriormente y CVE-2022-27925. Originalmente, Zimbra denominó...

CVE-2022-37042

CVE-2022-37042 Usage 查看漏洞信息。 root@kitploit: go run main.go -s / / | / / / | \ / \ | \ | / / / // /| \ / / | | / / // // / / // // / / / / / / / // // / / / | |/ / /// // // / // /// / / / // / / / / |// ///// // /// // // @0xf4n9x WRN Use with caution. You are responsible for your actions. WRN...

CVE-2022-27925

CVE-2022-27925 Descripción El 10 de mayo de 2022, Zimbra publicó las versiones 9.0.0 patch 24 y 8.8.15 patch 31 para abordar múltiples vulnerabilidades en Zimbra Collaboration Suite, incluyendo CVE-2022-27924 sobre la que escribimos anteriormente y CVE-2022-27925. Originalmente, Zimbra denominó a...

CVE-2025-68645

🛡️ CVE-2025-68645 - Analisi di Inclusione Locale di File LFI in Zimbra 📌 Panoramica Questo documento descrive una vulnerabilità di Inclusione Locale di File LFI che interessa Zimbra Collaboration Suite. Il problema deriva da una gestione impropria del seguente parametro: root@kitploit:...

Poc_CVE-2025-68645

CVE-2025-68645 - Vulnerabilità di Path Traversal in Zimbra 📋 Panoramica CVE-2025-68645 è una vulnerabilità di path traversal in Zimbra Collaboration Suite che consente ad attacker non autenticati di leggere file arbitrari dal filesystem del server. Endpoint Vulnerabile...

Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite

Wazuh Rules CVE-2026-73570 Zimbra OS Command Injection Dete...

The vulnerability of the zimbra-snmp package in the Zimbra Collaboration Suite (ZCS) enterprise email management system allows a hacker to execute arbitrary code.

The vulnerability of the zimbra-snmp package in the Zimbra Collaboration Suite email management system is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite

CVE-2026-73570 PoC - SMTP Command Injection Tester A custom,...

Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite

CVE-2026-73570 CVE-2026-73570 PoC Morehttps://...

Vulnerability handling in Zimbra Collaboration Suite

Zimbra has identified a vulnerability in the Zimbra Collaboration Suite. This vulnerability exists in the Zimbra Collaboration Suite version 10.1.20. Unauthorized attackers can execute OS commands through specially crafted SMTP requests. This requires that the Zimbra SNMP package be installed and...

Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability

Zimbra Collaboration Suite ZCS contains an OS command injection vulnerability which could allow an unauthenticated attacker to send specially crafted SMTP requests that may result in execution of arbitrary operating system commands as the Zimbra user...

VulnCheck KEV: CVE-2018-14013

Synacor Zimbra Collaboration Suite Collaboration before 8.8.11 has XSS in the AJAX and html web clients...

The vulnerability of the Zimbra Collaboration Suite’s email management system, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Zimbra Collaboration Suite email management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the Zimbra Collaboration Suite’s corporate email management system, related to the， allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Zimbra Collaboration Suite email management system is related to the of inter-site requests. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability

Synacor Zimbra Collaboration Suite ZCS contains a cross-site scripting vulnerability that could allow attackers to execute arbitrary JavaScript within the user's session, potentially leading to unauthorized access to sensitive information...