CVE-2026-73570

CVE-2026-73570 — Zimbra ZCS SNMP Notification RCE exploit PoC Unauthenticated Remote Code Execution via OS Command Injection in the Zimbra Collaboration Suite SNMP notification handler. Overview...

CVE-2025-68645

ZimLFI-Hunter CVE-2025-68645 ZimLFI-Hunter — это профессиональный сканер Proof-of-Concept PoC, предназначенный для выявления уязвимости CVE-2025-68645 в Zimbra Collaboration Suite. Инструмент обнаруживает ошибки Local File Inclusion LFI через конечную точку /h/printcalendar. 🛡️ Обзор уязвимости...

CVE-2022-27925

CVE-2022-27925 Zimbra RCE 2022 Этот репозиторий является частью hgrab-framework dork title: "Zimbra Web Client Sign In" Затронутый продукт Zimbra Collaboration Suite Network Edition 9.0.0 Patch 23 и более ранние версии Zimbra Collaboration Suite Network Edition 8.8.15 Patch 30 и более ранние верс...

CVE-2022-27925

CVE-2022-27925 설명 2022년 5월 10일, Zimbra는 Zimbra Collaboration Suite의 여러 취약점을 해결하기 위해 9.0.0 패치 24 및 8.8.15 패치 31 버전을 출시했습니다. 여기에는 CVE-2022-27924이전에 작성한 글 및 CVE-2022-27925가 포함됩니다. 처음에 Zimbra는 CVE-2022-27925를 인증된 경로 탐색 공격으로 분류했습니다. 관리 사용자가 Zimbra 계정 권한으로 파일 시스템의 모든 디렉터리에 파일을 쓸 수 있는 취약점이었습니다. 처음에는 관리자...

CVE-2022-37042

CVE-2022-37042 Usage Afficher les informations sur la vulnérabilité. root@kitploit: go run main.go -s / / | / / / | \ / \ | \ | / / / // /| \ / / | | / / // // / / // // / / / / / / / // // / / / | |/ / /// // // / // /// / / / // / / / / |// ///// // /// // // @0xf4n9x WRN Use with caution...

CVE-2022-27925

CVE-2022-27925 설명 2022년 5월 10일, Zimbra는 Zimbra Collaboration Suite의 여러 취약점을 해결하기 위해 9.0.0 패치 24 및 8.8.15 패치 31을 출시했습니다. 여기에는 이전에 저희가 다룬 CVE-2022-27924와 CVE-2022-27925가 포함됩니다. 원래 Zimbra는 CVE-2022-27925를 인증된 경로 탐색 공격으로 분류했으며, 관리 사용자가 Zimbra 계정으로 파일 시스템의 모든 디렉터리에 파일을 쓸 수 있는 취약점이었습니다. 처음에는 관리자 전용 공격으...

Zimbra Collaboration Suite - Memcached Command Injection

Zimbra Collaboration Suite versions 8.8.15 and 9.0 contain a memcached command injection vulnerability that allows an unauthenticated attacker to inject arbitrary memcache commands into a targeted instance, leading to cache poisoning and potential credential theft. id: CVE-2022-27924 info: name:...

CVE-2025-68645

🛡️ CVE-2025-68645 - Analisi di Inclusione Locale di File LFI in Zimbra 📌 Panoramica Questo documento descrive una vulnerabilità di Inclusione Locale di File LFI che interessa Zimbra Collaboration Suite. Il problema deriva da una gestione impropria del seguente parametro: root@kitploit:...

Poc_CVE-2025-68645

CVE-2025-68645 - Vulnerabilità di Path Traversal in Zimbra 📋 Panoramica CVE-2025-68645 è una vulnerabilità di path traversal in Zimbra Collaboration Suite che consente ad attacker non autenticati di leggere file arbitrari dal filesystem del server. Endpoint Vulnerabile...

Zimbra-CVE-2026-73570-Rules

Wazuh-Regeln CVE-2026-73570 Zimbra OS Command Injection Erkennungsregeln für CVE-2026-73570 , eine OS-Command-Injection in der Zimbra Collaboration Suite über den SNMP-Trap-Benachrichtigungsparameter snmpnotify. Schwachstelle...

Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite

Wazuh Rules CVE-2026-73570 Zimbra OS Command Injection Dete...

The vulnerability of the zimbra-snmp package in the Zimbra Collaboration Suite (ZCS) enterprise email management system allows a hacker to execute arbitrary code.

The vulnerability of the zimbra-snmp package in the Zimbra Collaboration Suite email management system is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite

CVE-2026-73570 PoC - SMTP Command Injection Tester A custom,...

Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite

CVE-2026-73570 CVE-2026-73570 PoC Morehttps://...

Vulnerability handling in Zimbra Collaboration Suite

Zimbra has identified a vulnerability in the Zimbra Collaboration Suite. This vulnerability exists in the Zimbra Collaboration Suite version 10.1.20. Unauthorized attackers can execute OS commands through specially crafted SMTP requests. This requires that the Zimbra SNMP package be installed and...

Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability

Zimbra Collaboration Suite ZCS contains an OS command injection vulnerability which could allow an unauthenticated attacker to send specially crafted SMTP requests that may result in execution of arbitrary operating system commands as the Zimbra user...

VulnCheck KEV: CVE-2018-14013

Synacor Zimbra Collaboration Suite Collaboration before 8.8.11 has XSS in the AJAX and html web clients...

The vulnerability of the Zimbra Collaboration Suite’s email management system, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Zimbra Collaboration Suite email management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the Zimbra Collaboration Suite’s corporate email management system, related to the， allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Zimbra Collaboration Suite email management system is related to the of inter-site requests. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability

Synacor Zimbra Collaboration Suite ZCS contains a cross-site scripting vulnerability that could allow attackers to execute arbitrary JavaScript within the user's session, potentially leading to unauthorized access to sensitive information...