Zimbra <9.0.0.p27 RCE

Zimbra Unauthenticated Remote Code Execution Exploit (CVE-2022-27925)

Zimbra CVE-2022-27925 PoC

RCE exploit for attack chain in "A Saga of Code Executions on Zimbra" post

Zimbra RCE PoC - CVE-2019-9670 XXE/SSRF

Zimbra Python Client

Zimbra Weak Password Scanner

Zimbra Scripts Repository

This is a simple bot that can send emails to multiple recipients Which is made by python and selenium.

Python library for accessing Zimbra SOAP.

🔥 Arbimz is a python tool created to exploit the vulnerability on Zimbra assigned as CVE-2019-9670.

This is my workaround for zimbra's postfix issue for preventing authenticated user can modify FROM: in email address

Zimbra Backup Open Source

Python Script - Single-Server Zimbra

Zimbra 9.0 Python APIs for Account Management, Creation, Domain Registration, and Status Management

Query sending permissions on a Zimbra server

A stress test tool for zimbra mailbox

Syncs status of locked accounts in Active Directory with Zimbra mailboxes

Script for automating user migration in Zimbra split domain environment

mailboxd component in Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10 has an XML External Entity injection (XXE) vulnerability, as demonstrated by Autodiscover/Autodiscover.xml.