CVE-2022-27925

CVE-2022-27925 विवरण 10 मई, 2022 को, Zimbra ने Zimbra Collaboration Suite में कई कमजोरियों को संबोधित करने के लिए संस्करण 9.0.0 पैच 24 और 8.8.15 पैच 31 जारी किए, जिनमें CVE-2022-27924 जिसके बारे में हमने पहले लिखा था और CVE-2022-27925 शामिल हैं। मूल रूप से, Zimbra ने CVE-2022-27925 को एक प्रमाणित...

CVE-2026-73570

CVE-2026-73570 — Exploit de RCE por notificação SNMP do Zimbra ZCS PoC Execução remota de código não autenticada via injeção de comandos do sistema operacional no manipulador de notificações SNMP do Zimbra Collaboration Suite. Visão geral...

CVE-2022-27925

CVE-2022-27925 描述 2022年5月10日，Zimbra发布了9.0.0补丁24和8.8.15补丁31，以修复Zimbra Collaboration Suite中的多个漏洞，包括CVE-2022-27924（我们之前写过）和CVE-2022-27925。...

CVE-2022-27925

CVE-2022-27925 Zimbra RCE 2022 यह रेपो hgrab-framework का हिस्सा है dork title: "Zimbra Web Client Sign In" प्रभावित उत्पाद Zimbra Collaboration Suite Network Edition 9.0.0 Patch 23 और पुराने Zimbra Collaboration Suite Network Edition 8.8.15 Patch 30 और पुराने स्थापना सर्वर पर ऐप स्थापित करें...

CVE-2025-68645

ZimLFI-Hunter CVE-2025-68645 ZimLFI-Hunter è uno scanner Proof-of-Concept PoC professionale progettato per identificare la vulnerabilità CVE-2025-68645 in Zimbra Collaboration Suite. Questo strumento rileva i difetti di Local File Inclusion LFI attraverso l'endpoint /h/printcalendar. 🛡️ Panoramica...

CVE-2025-68645

🛡️ CVE-2025-68645 - Zimbra 로컬 파일 포함 LFI 분석 📌 개요 이 문서는 Zimbra Collaboration Suite 에 영향을 미치는 로컬 파일 포함 LFI 취약점에 대해 설명합니다. 이 문제는 다음 매개변수의 부적절한 처리에서 발생합니다. root@kitploit: /h/?javax.servlet.include.servletpath= 이로 인해 인증되지 않은 사용자가 내부 애플리케이션 리소스에 접근할 수 있습니다. 🔍 취약점 세부 정보 유형: 로컬 파일 포함 LFI 접근: 인증되지 않음 영향을 받는...

CVE-2022-37042

CVE-2022-37042 Usage Visualizza informazioni sulla vulnerabilità. root@kitploit: go run main.go -s / / | / / / | \ / \ | \ | / / / // /| \ / / | | / / // // / / // // / / / / / / / // // / / / | |/ / /// // // / // /// / / / // / / / / |// ///// // /// // // @0xf4n9x WRN Use with caution. You...

Zimbra Collaboration Suite - Memcached Command Injection

Zimbra Collaboration Suite versions 8.8.15 and 9.0 contain a memcached command injection vulnerability that allows an unauthenticated attacker to inject arbitrary memcache commands into a targeted instance, leading to cache poisoning and potential credential theft. id: CVE-2022-27924 info: name:...

Vulnerability handling in Zimbra Collaboration Suite

Zimbra has identified a vulnerability in the Zimbra Collaboration Suite. This vulnerability exists in the Zimbra Collaboration Suite version 10.1.20. Unauthorized attackers can execute OS commands through specially crafted SMTP requests. This requires that the Zimbra SNMP package be installed and...

Poc_CVE-2025-68645

CVE-2025-68645 - Vulnerabilità di Path Traversal in Zimbra 📋 Panoramica CVE-2025-68645 è una vulnerabilità di path traversal in Zimbra Collaboration Suite che consente ad attacker non autenticati di leggere file arbitrari dal filesystem del server. Endpoint Vulnerabile...

Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability

Zimbra Collaboration Suite ZCS contains an OS command injection vulnerability which could allow an unauthenticated attacker to send specially crafted SMTP requests that may result in execution of arbitrary operating system commands as the Zimbra user...

VulnCheck KEV: CVE-2018-14013

Synacor Zimbra Collaboration Suite Collaboration before 8.8.11 has XSS in the AJAX and html web clients...

The vulnerability of the Zimbra Collaboration Suite’s email management system, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Zimbra Collaboration Suite email management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the Zimbra Collaboration Suite’s corporate email management system, related to the， allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Zimbra Collaboration Suite email management system is related to the of inter-site requests. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability

Synacor Zimbra Collaboration Suite ZCS contains a cross-site scripting vulnerability that could allow attackers to execute arbitrary JavaScript within the user's session, potentially leading to unauthorized access to sensitive information...

CVE-2026-33368

Zimbra Collaboration Suite ZCS 10.0 and 10.1 contains a reflected cross-site scripting XSS vulnerability in the Classic Webmail REST interface /h/rest. The application fails to properly sanitize user-supplied input, allowing an unauthenticated attacker to inject malicious JavaScript into a crafte...

CVE-2025-71275

...

PT-2026-27441

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration Suite ZCS version 8.8.15 Description A security issue exists in the Zimbra Collaboration Suite ZCS PostJournal service that allows unauthenticated attackers to execute arbitrary system commands. This is possible due to...

编号撤回

Zimbra Collaboration Suite ZCS is an open-source collaboration suite developed by Zimbra Corporation. This product includes features such as WebMail, calendars, and contact management. The CVE number for this product has been withdrawn...

CVE-2026-33368

Zimbra Collaboration Suite ZCS 10.0 and 10.1 contains a reflected cross-site scripting XSS vulnerability in the Classic Webmail REST interface /h/rest. The application fails to properly sanitize user-supplied input, allowing an unauthenticated attacker to inject malicious JavaScript into a crafte...