391 matches found
CVE-2022-27925
CVE-2022-27925 Zimbra RCE 2022 This repo is part of the hgrab-framework dork title: "Zimbra Web Client Sign In" Affected product Zimbra Collaboration Suite Network Edition 9.0.0 Patch 23 and earlier Zimbra Collaboration Suite Network Edition 8.8.15 Patch 30 and earlier Installation Install the ap...
CVE-2022-27925
CVE-2022-27925 Description On May 10, 2022, Zimbra released versions 9.0.0 patch 24 and 8.8.15 patch 31 to address multiple vulnerabilities in Zimbra Collaboration Suite, including CVE-2022-27924 which we wrote about previously and CVE-2022-27925. Originally, Zimbra called CVE-2022-27925 an...
Poc_CVE-2025-68645
CVE-2025-68645 - Zimbra Path Traversal Vulnerability ๐ Overview CVE-2025-68645 is a path traversal vulnerability in Zimbra Collaboration Suite that allows unauthenticated attackers to read arbitrary files from the server's filesystem. Vulnerable Endpoint...
CVE-2025-68645
ZimLFI-Hunter CVE-2025-68645 ZimLFI-Hunter is a professional Proof-of-Concept PoC scanner designed to identify the CVE-2025-68645 vulnerability in Zimbra Collaboration Suite. This tool detects Local File Inclusion LFI flaws through the /h/printcalendar endpoint. ๐ก๏ธ Vulnerability Overview The...
Zimbra-CVE-2026-73570-Rules
Wazuh ่งๅ CVE-2026-73570๏ผZimbra ๆไฝ็ณป็ปๅฝไปคๆณจๅ ฅ๏ผ ้ๅฏน CVE-2026-73570 ็ๆฃๆต่งๅ๏ผ่ฏฅๆผๆดไธบ Zimbra Collaboration Suite ไธญ้่ฟ SNMP ้ท้ฑ้็ฅๅๆฐ๏ผsnmpnotify๏ผๅฎ็ฐ็ๆไฝ็ณป็ปๅฝไปคๆณจๅ ฅใ ๆผๆดไฟกๆฏ ๅญๆฎต| ่ฏฆๆ ---|--- CVE| CVE-2026-73570 ็ฑปๅ| ๆไฝ็ณป็ปๅฝไปคๆณจๅ ฅ ๅฝฑๅ็ๆฌ| Zimbra Collaboration Suite ๅ๏ผไธญๆทปๅ ๆฅๅฟๆบ๏ผ root@kitploit: apache /opt/zimbra/log/accesslog. syslog...
CVE-2026-73570
CVE-2026-73570 โ Zimbra zimbra-snmp ๆช่ช่จผOSใณใใณใใคใณใธใงใฏใทใงใณ PoC CVE-2026-73570 ใฎๆฆๅฟตๅฎ่จผใจใฏในใใญใคใใใใใฏ Zimbra Collaboration Suite ๅ ่ฒฌไบ้ : ใใฎ PoC ใฏ่ชๅฏใใใใปใญใฅใชใใฃใในใ ใ้ฒๅพก็็ ็ฉถใใใใณ่ช่บซใฎใทในใใ ใฎๆค่จผใฎใฟ ใ็ฎ็ใจใใฆใใพใใๆๆใใฆใใชใใทในใใ ใใพใใฏใในใใซๅฏพใใๆ็คบ็ใชๆธ้ขใซใใ่จฑๅฏใๆใใชใใทในใใ ใซๅฏพใใฆไฝฟ็จใใชใใงใใ ใใใ ่ๅผฑๆงใฎใกใซใใบใ Zimbra ใฎ SNMP ้็ฅๆฉ่ฝใฏ swatchdog ใไฝฟ็จใใฆ...
CVE-2026-73570
CVE-2026-73570 โ Zimbra ZCS SNMP Notification RCE exploit PoC Unauthenticated Remote Code Execution via OS Command Injection in the Zimbra Collaboration Suite SNMP notification handler. Overview...
CVE-2022-37042
CVE-2022-37042 Usage View vulnerability information. root@kitploit: go run main.go -s / / | / / / | \ / \ | \ | / / / // /| \ / / | | / / // // / / // // / / / / / / // // / / / | |/ / /// // // / // /// / / / // / / / / |// ///// // /// // // @0xf4n9x WRN Use with caution. You are responsible...
CVE-2022-27925
CVE-2022-27925 Description On May 10, 2022, Zimbra released versions 9.0.0 patch 24 and 8.8.15 patch 31 to address multiple vulnerabilities in Zimbra Collaboration Suite, including CVE-2022-27924 which we wrote about previously and CVE-2022-27925. Originally, Zimbra called CVE-2022-27925 an...
Zimbra Collaboration Suite - Memcached Command Injection
Zimbra Collaboration Suite versions 8.8.15 and 9.0 contain a memcached command injection vulnerability that allows an unauthenticated attacker to inject arbitrary memcache commands into a targeted instance, leading to cache poisoning and potential credential theft. id: CVE-2022-27924 info: name:...
CVE-2025-68645
๐ก๏ธ CVE-2025-68645 - Zimbra Local File Inclusion LFI Analysis ๐ Overview This document describes a Local File Inclusion LFI vulnerability affecting Zimbra Collaboration Suite. The issue arises from improper handling of the following parameter: root@kitploit: /h/?javax.servlet.include.servletpath=...
Zimbra Collaboration Suite 10.1.19 Command Injection
Zimbra Collaboration Suite versions 10.1.1 through 10.1.19 suffer from command injection via SMTP log poisoning. https://packetstorm.news/download/230686...
CVE-2026-73570
CVE-2026-73570 Zimbra โ Collaboration Suite RCE ์ฐธ๊ณ : ์ด ์ ์ฅ์๋ CVE-2026-73570์ ๋ํ ๋ ๋ฆฝ์ ์ธ ๊ธฐ์ ๋ถ์ ๋ฐ PoC ์ฌํ์ ํฌํจํฉ๋๋ค. ์๋ณธ ์ทจ์ฝ์ ๋ณด๊ณ ์๊ฐ ์๋๋๋ค. Zimbra Collaboration Suite RCE โ SMTP ๋ก๊ทธ ์ค์ผ โ swatchdog โ OS ๋ช ๋ น ์ฃผ์ CVSS 8.9, CISA KEV ์ ํ: OS ๋ช ๋ น ์ฃผ์ โ ์ธ์ฆ ์๋ RCE ๊ณต๊ฒฉ ๊ฒฝ๋ก: SMTP ๋ก๊ทธ ์ค์ผ โ swatchdog โ dosnmp ๋ฌธ์์ด ํ์ ์ ธ ํ์ฅ ์ํฅ ๋์: Zimb...
Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite
Wazuh Rules CVE-2026-73570 Zimbra OS Command Injection Dete...
The vulnerability of the zimbra-snmp package in the Zimbra Collaboration Suite (ZCS) enterprise email management system allows a hacker to execute arbitrary code.
The vulnerability of the zimbra-snmp package in the Zimbra Collaboration Suite email management system is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite
CVE-2026-73570 PoC - SMTP Command Injection Tester A custom,...
Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite
CVE-2026-73570 CVE-2026-73570 PoC Morehttps://...
Vulnerability handling in Zimbra Collaboration Suite
Zimbra has identified a vulnerability in the Zimbra Collaboration Suite. This vulnerability exists in the Zimbra Collaboration Suite version 10.1.20. Unauthorized attackers can execute OS commands through specially crafted SMTP requests. This requires that the Zimbra SNMP package be installed and...
Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability
Zimbra Collaboration Suite ZCS contains an OS command injection vulnerability which could allow an unauthenticated attacker to send specially crafted SMTP requests that may result in execution of arbitrary operating system commands as the Zimbra user...