391 matches found
CVE-2022-27925
CVE-2022-27925 Описание 10 мая 2022 года Zimbra выпустила версии 9.0.0 patch 24 и 8.8.15 patch 31 для устранения множества уязвимостей в Zimbra Collaboration Suite, включая CVE-2022-27924 о котором мы писали ранее и CVE-2022-27925. Изначально Zimbra назвала CVE-2022-27925 аутентифицированной атак...
CVE-2022-27925
CVE-2022-27925 Zimbra RCE 2022 Этот репозиторий является частью hgrab-framework dork title: "Zimbra Web Client Sign In" Затронутый продукт Zimbra Collaboration Suite Network Edition 9.0.0 Patch 23 и более ранние версии Zimbra Collaboration Suite Network Edition 8.8.15 Patch 30 и более ранние верс...
Poc_CVE-2025-68645
CVE-2025-68645 - Zimbra 경로 순회 취약점 📋 개요 CVE-2025-68645 는 Zimbra Collaboration Suite 의 경로 순회 취약점으로, 인증되지 않은 공격자가 서버 파일 시스템에서 임의 파일을 읽을 수 있습니다. 취약한 엔드포인트 /h/printconversations?javax.servlet.include.servletpath= 🎯 영향 영향| 심각도 ---|--- 인증되지 않은 파일 읽기| 🔴 높음 구성 정보 노출| 🔴 높음 자격 증명 유출| 🔴 높음 내부 네트워크 매핑| 🟠 중간 📁...
CVE-2025-68645
ZimLFI-Hunter CVE-2025-68645 ZimLFI-Hunter 는 Zimbra Collaboration Suite에서 CVE-2025-68645 취약점을 식별하도록 설계된 전문적인 개념 증명PoC 스캐너입니다. 이 도구는 /h/printcalendar 엔드포인트를 통해 로컬 파일 포함LFI 결함을 탐지합니다. 🛡️ 취약점 개요 이 취약점은 특정 Zimbra 서블릿에서 경로 정규화가 적절하지 않아 발생하며, 인증되지 않은 공격자가 javax.servlet.include.servletpath 매개변수를 조작하여 내부...
Zimbra-CVE-2026-73570-Rules
Wazuh 规则 CVE-2026-73570（Zimbra 操作系统命令注入） 针对 CVE-2026-73570 的检测规则，该漏洞为 Zimbra Collaboration Suite 中通过 SNMP 陷阱通知参数（snmpnotify）实现的操作系统命令注入。 漏洞信息 字段| 详情 ---|--- CVE| CVE-2026-73570 类型| 操作系统命令注入 影响版本| Zimbra Collaboration Suite 块）中添加日志源： root@kitploit: apache /opt/zimbra/log/accesslog. syslog...
CVE-2026-73570
CVE-2026-73570 — Zimbra zimbra-snmp 未認証OSコマンドインジェクション PoC CVE-2026-73570 の概念実証エクスプロイト。これは Zimbra Collaboration Suite 免責事項: この PoC は認可されたセキュリティテスト 、防御的研究、および自身のシステムの検証のみ を目的としています。所有していないシステム、またはテストに対する明示的な書面による許可を持たないシステムに対して使用しないでください。 脆弱性のメカニズム Zimbra の SNMP 通知機能は swatchdog を使用して...
CVE-2026-73570
CVE-2026-73570 — Zimbra ZCS SNMP Notification RCE exploit PoC Unauthenticated Remote Code Execution via OS Command Injection in the Zimbra Collaboration Suite SNMP notification handler. Overview...
CVE-2022-37042
CVE-2022-37042 Использование Просмотр информации об уязвимости. root@kitploit: go run main.go -s / / | / / / | \ / \ | \ | / / / // /| \ / / | | / / // // / / // // / / / / / / / // // / / / | |/ / /// // // / // /// / / / // / / / / |// ///// // /// // // @0xf4n9x WRN Use with caution. You...
CVE-2022-27925
CVE-2022-27925 Описание 10 мая 2022 года Zimbra выпустила версии 9.0.0 patch 24 и 8.8.15 patch 31 для устранения множества уязвимостей в Zimbra Collaboration Suite, включая CVE-2022-27924 о которой мы писали ранее и CVE-2022-27925. Изначально Zimbra назвала CVE-2022-27925 аутентифицированной атак...
Zimbra Collaboration Suite - Memcached Command Injection
Zimbra Collaboration Suite versions 8.8.15 and 9.0 contain a memcached command injection vulnerability that allows an unauthenticated attacker to inject arbitrary memcache commands into a targeted instance, leading to cache poisoning and potential credential theft. id: CVE-2022-27924 info: name:...
CVE-2025-68645
🛡️ CVE-2025-68645 - Анализ уязвимости Local File Inclusion LFI в Zimbra 📌 Обзор В этом документе описывается уязвимость Local File Inclusion LFI , затрагивающая Zimbra Collaboration Suite. Проблема возникает из-за неправильной обработки следующего параметра: root@kitploit:...
Zimbra Collaboration Suite 10.1.19 Command Injection
Zimbra Collaboration Suite versions 10.1.1 through 10.1.19 suffer from command injection via SMTP log poisoning. https://packetstorm.news/download/230686...
CVE-2026-73570
CVE-2026-73570 Zimbra — Collaboration Suite RCE 참고: 이 저장소는 CVE-2026-73570에 대한 독립적인 기술 분석 및 PoC 재현을 포함합니다. 원본 취약점 보고서가 아닙니다. Zimbra Collaboration Suite RCE — SMTP 로그 오염 → swatchdog → OS 명령 주입 CVSS 8.9, CISA KEV 유형: OS 명령 주입 → 인증 없는 RCE 공격 경로: SMTP 로그 오염 → swatchdog → dosnmp 문자열 형식 셸 확장 영향 대상: Zimb...
Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite
Wazuh Rules CVE-2026-73570 Zimbra OS Command Injection Dete...
The vulnerability of the zimbra-snmp package in the Zimbra Collaboration Suite (ZCS) enterprise email management system allows a hacker to execute arbitrary code.
The vulnerability of the zimbra-snmp package in the Zimbra Collaboration Suite email management system is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite
CVE-2026-73570 PoC - SMTP Command Injection Tester A custom,...
Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite
CVE-2026-73570 CVE-2026-73570 PoC Morehttps://...
Vulnerability handling in Zimbra Collaboration Suite
Zimbra has identified a vulnerability in the Zimbra Collaboration Suite. This vulnerability exists in the Zimbra Collaboration Suite version 10.1.20. Unauthorized attackers can execute OS commands through specially crafted SMTP requests. This requires that the Zimbra SNMP package be installed and...
Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability
Zimbra Collaboration Suite ZCS contains an OS command injection vulnerability which could allow an unauthenticated attacker to send specially crafted SMTP requests that may result in execution of arbitrary operating system commands as the Zimbra user...
