Lucene search
+L

391 matches found

Kitploit
Kitploit
added 2026/09/21 3:02 p.m.12 views

CVE-2022-27925

CVE-2022-27925 Zimbra RCE 2022 このリポジトリは hgrab-framework の一部です dork title: "Zimbra Web Client Sign In" 影響を受ける製品 Zimbra Collaboration Suite Network Edition 9.0.0 Patch 23 およびそれ以前 Zimbra Collaboration Suite Network Edition 8.8.15 Patch 30 およびそれ以前 インストール サーバーにアプリをインストールします root@kitploit: user@domain:...

7.2CVSS8.5AI score0.98676EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/21 1:47 p.m.12 views

CVE-2022-37042

CVE-2022-37042 사용법 취약점 정보를 확인합니다. root@kitploit: go run main.go -s / / | / / / | \ / \ | \ | / / / // /| \ / / | | / / // // / / // // / / / / / / // // / / / | |/ / /// // // / // /// / / / // / / / / |// ///// // /// // // @0xf4n9x WRN Use with caution. You are responsible for your actions...

9.8CVSS9.2AI score0.91893EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/21 12:15 p.m.12 views

CVE-2022-27925

CVE-2022-27925 説明 2022年5月10日、Zimbraは、Zimbra Collaboration Suiteの複数の脆弱性に対処するため、バージョン9.0.0パッチ24および8.8.15パッチ31をリリースしました。これには、以前に取り上げたCVE-2022-27924とCVE-2022-27925が含まれます。...

7.5CVSS8.4AI score0.98676EPSS
SaveExploits14References1
Kitploit
Kitploit
added 2026/09/21 1:55 a.m.11 views

CVE-2025-68645

🛡️ CVE-2025-68645 - Zimbra 로컬 파일 포함 LFI 분석 📌 개요 이 문서는 Zimbra Collaboration Suite 에 영향을 미치는 로컬 파일 포함 LFI 취약점에 대해 설명합니다. 이 문제는 다음 매개변수의 부적절한 처리에서 발생합니다. root@kitploit: /h/?javax.servlet.include.servletpath= 이로 인해 인증되지 않은 사용자가 내부 애플리케이션 리소스에 접근할 수 있습니다. 🔍 취약점 세부 정보 유형: 로컬 파일 포함 LFI 접근: 인증되지 않음 영향을 받는...

8.8CVSS8.1AI score0.48873EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/20 11:05 p.m.4 views

CVE-2026-73570

CVE-2026-73570 — Zimbra Collaboration Suite RCE Note: This repository contains an independent technical analysis and PoC reproduction of CVE-2026-73570. It is not the original vulnerability report. Zimbra Collaboration Suite RCE — SMTP log poisoning → swatchdog → OS Command Injection CVSS 8.9, CI...

8.9CVSS8AI score0.32383EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/19 1:52 p.m.11 views

CVE-2022-27925

CVE-2022-27925 説明 2022年5月10日、Zimbraは、CVE-2022-27924(以前に取り上げたもの)とCVE-2022-27925を含む、Zimbra Collaboration Suiteの複数の脆弱性に対処するため、バージョン9.0.0 patch 24および8.8.15 patch 31をリリースしました。...

7.5CVSS8.4AI score0.98676EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/18 10:36 a.m.12 views

Poc_CVE-2025-68645

CVE-2025-68645 - Zimbra 경로 순회 취약점 📋 개요 CVE-2025-68645 는 Zimbra Collaboration Suite 의 경로 순회 취약점으로, 인증되지 않은 공격자가 서버 파일 시스템에서 임의 파일을 읽을 수 있습니다. 취약한 엔드포인트 /h/printconversations?javax.servlet.include.servletpath= 🎯 영향 영향| 심각도 ---|--- 인증되지 않은 파일 읽기| 🔴 높음 구성 정보 노출| 🔴 높음 자격 증명 유출| 🔴 높음 내부 네트워크 매핑| 🟠 중간 📁...

8.8CVSS8.2AI score0.48873EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/17 10:30 p.m.12 views

CVE-2025-68645

ZimLFI-Hunter CVE-2025-68645 ZimLFI-Hunter 는 Zimbra Collaboration Suite에서 CVE-2025-68645 취약점을 식별하도록 설계된 전문적인 개념 증명PoC 스캐너입니다. 이 도구는 /h/printcalendar 엔드포인트를 통해 로컬 파일 포함LFI 결함을 탐지합니다. 🛡️ 취약점 개요 이 취약점은 특정 Zimbra 서블릿에서 경로 정규화가 적절하지 않아 발생하며, 인증되지 않은 공격자가 javax.servlet.include.servletpath 매개변수를 조작하여 내부...

8.8CVSS8.2AI score0.48873EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/17 8:37 p.m.42 views

Zimbra-CVE-2026-73570-Rules

Wazuh ルール CVE-2026-73570(Zimbra OSコマンドインジェクション) CVE-2026-73570 の検知ルールです。Zimbra Collaboration Suite における SNMP トラップ通知パラメータ(snmpnotify)を介した OS コマンドインジェクションを検知します。 脆弱性...

8.9CVSS8.2AI score0.32383EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/17 2:19 a.m.16 views

CVE-2026-73570

CVE-2026-73570 — Zimbra zimbra-snmp 未認証OSコマンドインジェクション PoC CVE-2026-73570 の概念実証エクスプロイト。これは Zimbra Collaboration Suite 免責事項: この PoC は認可されたセキュリティテスト 、防御的研究、および自身のシステムの検証のみ を目的としています。所有していないシステム、またはテストに対する明示的な書面による許可を持たないシステムに対して使用しないでください。 脆弱性のメカニズム Zimbra の SNMP 通知機能は swatchdog を使用して...

8.9CVSS8.3AI score0.32383EPSS
SaveExploits10
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.51 views

Zimbra Collaboration Suite - Memcached Command Injection

Zimbra Collaboration Suite versions 8.8.15 and 9.0 contain a memcached command injection vulnerability that allows an unauthenticated attacker to inject arbitrary memcache commands into a targeted instance, leading to cache poisoning and potential credential theft. id: CVE-2022-27924 info: name:...

7.5CVSS7.8AI score0.85398EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2026/09/17 1:54 a.m.36 views

CVE-2026-73570

CVE-2026-73570 — Zimbra ZCS SNMP Notification RCE exploit PoC Unauthenticated Remote Code Execution via OS Command Injection in the Zimbra Collaboration Suite SNMP notification handler. Overview...

8.9CVSS8.2AI score0.32383EPSS
SaveExploits10
Packet Storm
Packet Storm
added 2026/09/07 12:00 a.m.17 views

Zimbra Collaboration Suite 10.1.19 Command Injection

Zimbra Collaboration Suite versions 10.1.1 through 10.1.19 suffer from command injection via SMTP log poisoning. https://packetstorm.news/download/230686...

5.7AI score
SaveExploits0
GithubExploit
GithubExploit
added 2026/08/28 10:37 a.m.51 views

Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite

Wazuh Rules CVE-2026-73570 Zimbra OS Command Injection Dete...

8.9CVSS7.4AI score0.32383EPSS
SaveExploits10
BDU FSTEC
BDU FSTEC
added 2026/08/26 12:00 a.m.24 views

The vulnerability of the zimbra-snmp package in the Zimbra Collaboration Suite (ZCS) enterprise email management system allows a hacker to execute arbitrary code.

The vulnerability of the zimbra-snmp package in the Zimbra Collaboration Suite email management system is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.9CVSS6.2AI score0.32383EPSS
SaveExploits10References5Affected Software1
GithubExploit
GithubExploit
added 2026/08/25 10:25 a.m.27 views

Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite

CVE-2026-73570 PoC - SMTP Command Injection Tester A custom,...

8.9CVSS7AI score0.32383EPSS
SaveExploits10
GithubExploit
GithubExploit
added 2026/08/24 11:55 a.m.24 views

Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite

CVE-2026-73570 CVE-2026-73570 PoC Morehttps://...

8.9CVSS5.5AI score0.32383EPSS
SaveExploits10
NCSC
NCSC
added 2026/08/23 11:12 a.m.130 views

Vulnerability handling in Zimbra Collaboration Suite

Zimbra has identified a vulnerability in the Zimbra Collaboration Suite. This vulnerability exists in the Zimbra Collaboration Suite version 10.1.20. Unauthorized attackers can execute OS commands through specially crafted SMTP requests. This requires that the Zimbra SNMP package be installed and...

8.9CVSS5.9AI score0.32383EPSS
SaveExploits10References3
CISA KEV Catalog
CISA KEV Catalog
added 2026/08/21 12:00 a.m.35 views

Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability

Zimbra Collaboration Suite ZCS contains an OS command injection vulnerability which could allow an unauthenticated attacker to send specially crafted SMTP requests that may result in execution of arbitrary operating system commands as the Zimbra user...

8.9CVSS6.3AI score0.32383EPSS
SaveIn wildExploits10
VulnCheck KEV
VulnCheck KEV
added 2026/08/06 12:00 a.m.15 views

VulnCheck KEV: CVE-2018-14013

Synacor Zimbra Collaboration Suite Collaboration before 8.8.11 has XSS in the AJAX and html web clients...

6.1CVSS6.1AI score0.08435EPSS
SaveIn wildExploits2References14
Rows per page
Query Builder