1734 matches found
📄 Zimbra Collaboration Suite Postjournal 9.0.0 Remote Command Execution
A critical vulnerability exists in the Zimbra Collaboration Suite ZCS PostJournal service that allows attackers to execute arbitrary system commands without authentication. The vulnerability is triggered through SMTP injection using a malicious RCPT TO parameter. This exploit provides full remote...
📄 Zimbra Collaboration Suite Postjournal 8.8.15 Remote Code Execution
Zimbra Collaboration Suite Postjournal version 8.8.15 unauthenticated proof of concept remote code execution exploit that leverages SMTP injection. ============================================================================================================================================= | Title...
November “In the Trend of VM” (#21): vulnerabilities in Windows, SharePoint, Redis, XWiki, Zimbra Collaboration, and Linux
November "In the Trend of VM" 21: vulnerabilities in Windows, SharePoint, Redis, XWiki, Zimbra Collaboration, and Linux. The usual monthly roundup. After several months, here's a big one. Post on Habr rus Post on SecurityLab rus Digest on the PT website rus A total of nine vulnerabilities: RCE -...
PT-2025-52669
Name of the Vulnerable Software and Affected Versions Zimbra Collaboration Suite ZCS versions 10.0 and 10.1 Description A Local File Inclusion LFI vulnerability exists in the Webmail Classic UI of Zimbra Collaboration ZCS due to improper handling of user-supplied request parameters in the...
About Cross Site Scripting – Zimbra Collaboration (CVE-2025-27915) vulnerability
About Cross Site Scripting - Zimbra Collaboration CVE-2025-27915 vulnerability. Zimbra Collaboration is a collaboration software suite, somewhat similar to Microsoft Exchange. Exploiting this vulnerability in the web mail client Classic Web Client allows an unauthenticated attacker to execute...
CVE-2025-62763
Zimbra Collaboration ZCS before 10.1.12 allows SSRF because of the configuration of the chat proxy...
CVE-2025-62763
Zimbra Collaboration ZCS before 10.1.12 allows SSRF because of the configuration of the chat proxy...
Zimbra Collaboration 代码问题漏洞
Zimbra Collaboration is an open source enterprise-class email and collaboration platform from Zimbra, Inc. that supports email, calendaring, document management, and team collaboration features. A code issue vulnerability exists in Zimbra Collaboration versions prior to 10.1.12, which stems from ...
Zimbra Collaboration 10.1.x < 10.1.5 Stored Cross-Site Scripting
According to its banner, the version of Zimbra Collaboration running on the remote host is 10.0.x prior to 10.0.13 or 10.1.x prior to 10.1.5. It is, therefore, affected by a Stored Cross-Site Scripting XSS vulnerability due to insufficient sanitization of HTML content in ICS files. Note that the...
CVE-2025-62763
Zimbra Collaboration ZCS before 10.1.12 allows SSRF because of the configuration of the chat proxy...
Zimbra Collaboration 10.0.x < 10.0.13 Stored Cross-Site Scripting
According to its banner, the version of Zimbra Collaboration running on the remote host is 10.0.x prior to 10.0.13 or 10.1.x prior to 10.1.5. It is, therefore, affected by a Stored Cross-Site Scripting XSS vulnerability due to insufficient sanitization of HTML content in ICS files. Note that the...
EUVD-2025-35204
Zimbra Collaboration ZCS before 10.1.12 allows SSRF because of the configuration of the chat proxy...
CVE-2025-62763
CVE-2025-62763 affects Zimbra Collaboration (ZCS) before 10.1.12. The root cause is a misconfiguration of the chat proxy that enables SSRF. The CVSS base metrics indicate a Network attack with Low complexity, Privileges Required: Low, and no user interaction, with partial impact on integrity. The...
CVE-2025-62763
Zimbra Collaboration ZCS before 10.1.12 allows SSRF because of the configuration of the chat proxy...
The vulnerability in the built-in GraphQL client of the Zimbra Collaboration Suite (ZCS) corporate email management system allows a attacker to perform a CSRF attack and expose sensitive information.
The vulnerability of the built-in GraphQL client of the Zimbra Collaboration Suite email management system is related to the of cross-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack and expose sensitive information...
Zimbra Collaboration Server 9.x < 9.0.0 Patch 39, 10.0.x < 10.0.13, 10.1.x < 10.1.5 XSS
According to its self-reported version number, Zimbra Collaboration Server is affected by the following vulnerability including:A stored cross-site scripting XSS vulnerability exists in the Classic Web Client due to insufficient sanitization of HTML. Using a specifically crafted email, a attacker...
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2025-27915link is external Synacor Zimbra Collaboration Suite ZCS Cross-site Scripting Vulnerability This type of vulnerability is a frequent attack vector for...
EUVD-2012-1239
Malware in sbrugna...