391 matches found
CVE-2022-27925
CVE-2022-27925 Zimbra RCE 2022 Этот репозиторий является частью hgrab-framework dork title: "Zimbra Web Client Sign In" Затронутый продукт Zimbra Collaboration Suite Network Edition 9.0.0 Patch 23 и более ранние версии Zimbra Collaboration Suite Network Edition 8.8.15 Patch 30 и более ранние верс...
Poc_CVE-2025-68645
CVE-2025-68645 - Zimbra 경로 순회 취약점 📋 개요 CVE-2025-68645 는 Zimbra Collaboration Suite 의 경로 순회 취약점으로, 인증되지 않은 공격자가 서버 파일 시스템에서 임의 파일을 읽을 수 있습니다. 취약한 엔드포인트 /h/printconversations?javax.servlet.include.servletpath= 🎯 영향 영향| 심각도 ---|--- 인증되지 않은 파일 읽기| 🔴 높음 구성 정보 노출| 🔴 높음 자격 증명 유출| 🔴 높음 내부 네트워크 매핑| 🟠 중간 📁...
CVE-2025-68645
ZimLFI-Hunter CVE-2025-68645 ZimLFI-Hunter 는 Zimbra Collaboration Suite에서 CVE-2025-68645 취약점을 식별하도록 설계된 전문적인 개념 증명PoC 스캐너입니다. 이 도구는 /h/printcalendar 엔드포인트를 통해 로컬 파일 포함LFI 결함을 탐지합니다. 🛡️ 취약점 개요 이 취약점은 특정 Zimbra 서블릿에서 경로 정규화가 적절하지 않아 발생하며, 인증되지 않은 공격자가 javax.servlet.include.servletpath 매개변수를 조작하여 내부...
Zimbra-CVE-2026-73570-Rules
Wazuh ルール CVE-2026-73570（Zimbra OSコマンドインジェクション） CVE-2026-73570 の検知ルールです。Zimbra Collaboration Suite における SNMP トラップ通知パラメータ（snmpnotify）を介した OS コマンドインジェクションを検知します。 脆弱性...
CVE-2026-73570
CVE-2026-73570 — Zimbra zimbra-snmp 인증되지 않은 OS 명령 주입 PoC CVE-2026-73570 에 대한 개념 증명 익스플로잇으로, Zimbra Collaboration Suite 면책 조항: 이 PoC는 오직 승인된 보안 테스트 , 방어 연구, 그리고 자신의 시스템 검증을 위한 것입니다. 소유하지 않았거나 명시적인 서면 테스트 허가를 받지 않은 시스템에 대해서는 사용하지 마십시오. 취약점 메커니즘 Zimbra의 SNMP 알림 기능은 swatchdog 를 사용하여...
Zimbra Collaboration Suite - Memcached Command Injection
Zimbra Collaboration Suite versions 8.8.15 and 9.0 contain a memcached command injection vulnerability that allows an unauthenticated attacker to inject arbitrary memcache commands into a targeted instance, leading to cache poisoning and potential credential theft. id: CVE-2022-27924 info: name:...
CVE-2026-73570
CVE-2026-73570 — Zimbra ZCS SNMP Notification RCE exploit PoC Unauthenticated Remote Code Execution via OS Command Injection in the Zimbra Collaboration Suite SNMP notification handler. Overview...
CVE-2022-37042
CVE-2022-37042 Использование Просмотр информации об уязвимости. root@kitploit: go run main.go -s / / | / / / | \ / \ | \ | / / / // /| \ / / | | / / // // / / // // / / / / / / / // // / / / | |/ / /// // // / // /// / / / // / / / / |// ///// // /// // // @0xf4n9x WRN Use with caution. You...
CVE-2022-27925
CVE-2022-27925 Описание 10 мая 2022 года Zimbra выпустила версии 9.0.0 patch 24 и 8.8.15 patch 31 для устранения множества уязвимостей в Zimbra Collaboration Suite, включая CVE-2022-27924 о которой мы писали ранее и CVE-2022-27925. Изначально Zimbra назвала CVE-2022-27925 аутентифицированной атак...
CVE-2025-68645
🛡️ CVE-2025-68645 - Анализ уязвимости Local File Inclusion LFI в Zimbra 📌 Обзор В этом документе описывается уязвимость Local File Inclusion LFI , затрагивающая Zimbra Collaboration Suite. Проблема возникает из-за неправильной обработки следующего параметра: root@kitploit:...
CVE-2026-73570
CVE-2026-73570 — Zimbra Collaboration Suite RCE Note: This repository contains an independent technical analysis and PoC reproduction of CVE-2026-73570. It is not the original vulnerability report. Zimbra Collaboration Suite RCE — SMTP log poisoning → swatchdog → OS Command Injection CVSS 8.9, CI...
CVE-2022-27925
CVE-2022-27925 Описание 10 мая 2022 года Zimbra выпустила версии 9.0.0 patch 24 и 8.8.15 patch 31 для устранения множества уязвимостей в Zimbra Collaboration Suite, включая CVE-2022-27924 о котором мы писали ранее и CVE-2022-27925. Изначально Zimbra назвала CVE-2022-27925 аутентифицированной атак...
Zimbra Collaboration Suite 10.1.19 Command Injection
Zimbra Collaboration Suite versions 10.1.1 through 10.1.19 suffer from command injection via SMTP log poisoning. https://packetstorm.news/download/230686...
Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite
Wazuh Rules CVE-2026-73570 Zimbra OS Command Injection Dete...
The vulnerability of the zimbra-snmp package in the Zimbra Collaboration Suite (ZCS) enterprise email management system allows a hacker to execute arbitrary code.
The vulnerability of the zimbra-snmp package in the Zimbra Collaboration Suite email management system is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite
CVE-2026-73570 PoC - SMTP Command Injection Tester A custom,...
Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite
CVE-2026-73570 CVE-2026-73570 PoC Morehttps://...
Vulnerability handling in Zimbra Collaboration Suite
Zimbra has identified a vulnerability in the Zimbra Collaboration Suite. This vulnerability exists in the Zimbra Collaboration Suite version 10.1.20. Unauthorized attackers can execute OS commands through specially crafted SMTP requests. This requires that the Zimbra SNMP package be installed and...
Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability
Zimbra Collaboration Suite ZCS contains an OS command injection vulnerability which could allow an unauthenticated attacker to send specially crafted SMTP requests that may result in execution of arbitrary operating system commands as the Zimbra user...
