Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

CVE-2019-9670 PoC — Zimbra Collaboration Suite 代码问题漏洞

Source
Associated Vulnerability
Title: Zimbra Collaboration Suite 代码问题漏洞 (CVE-2019-9670)
Description:mailboxd component in Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10 has an XML External Entity injection (XXE) vulnerability, as demonstrated by Autodiscover/Autodiscover.xml.
Description
CVE-2019-9670 is used to find XXE bug
Readme

<div align="center">
  <img src="https://blogs.cappriciosec.com/uploaders/CVE-2019-9670%20(1).png" alt="logo">
</div>


## Badges



[![MIT License](https://img.shields.io/badge/License-MIT-green.svg)](https://choosealicense.com/licenses/mit/)
![PyPI - Version](https://img.shields.io/pypi/v/CVE-2019-9670)
![PyPI - Downloads](https://img.shields.io/pypi/dm/CVE-2019-9670)
![GitHub all releases](https://img.shields.io/github/downloads/Cappricio-Securities/CVE-2019-9670/total)
<a href="https://github.com/Cappricio-Securities/CVE-2019-9670/releases/"><img src="https://img.shields.io/github/release/Cappricio-Securities/CVE-2019-9670"></a>![Profile_view](https://komarev.com/ghpvc/?username=Cappricio-Securities&label=Profile%20views&color=0e75b6&style=flat)
[![Follow Twitter](https://img.shields.io/twitter/follow/cappricio_sec?style=social)](https://twitter.com/cappricio_sec)
<p align="center">

<p align="center">







## License

[MIT](https://choosealicense.com/licenses/mit/)



## Installation 

1. Install Python3 and pip [Instructions Here](https://www.python.org/downloads/) (If you can't figure this out, you shouldn't really be using this)

   - Install via pip
     - ```bash
          pip install CVE-2019-9670 
        ```
   - Run bellow command to check
     - `CVE-2019-9670 -h`

## Configurations 
2. We integrated with the Telegram API to receive instant notifications for vulnerability detection.
   
   - Telegram Notification
     - ```bash
          CVE-2019-9670 --chatid <YourTelegramChatID>
        ```
   - Open your telegram and search for [`@CappricioSecuritiesTools_bot`](https://web.telegram.org/k/#@CappricioSecuritiesTools_bot) and click start

## Usages 
3. This tool has multiple use cases.
   
   - To Check Single URL
     - ```bash
          CVE-2019-9670 -u http://example.com 
        ```
   - To Check List of URL 
      - ```bash
          CVE-2019-9670 -i urls.txt 
        ```
   - Save output into TXT file
      - ```bash
          CVE-2019-9670 -i urls.txt -o out.txt
        ```
   - Want to Learn about [`CVE-2019-9670`](https://blogs.cappriciosec.com/cve/137/CVE-2023-29489)? Then Type Below command
      - ```bash
          CVE-2019-9670 -b
        ```
     
<p align="center">
  <b>🚨 Disclaimer</b>
  
</p>
<p align="center">
<b>This tool is created for security bug identification and assistance; Cappricio Securities is not liable for any illegal use. 
  Use responsibly within legal and ethical boundaries. 🔐🛡️</b></p>


## Working PoC Video

[![asciicast](https://blogs.cappriciosec.com/uploaders/Screenshot%202024-04-27%20at%204.07.19%20PM.png)](https://asciinema.org/a/eYbvR6zzQb6GnZxTA50AWw3G9)




## Help menu

#### Get all items

```bash
👋 Hey Hacker
                                                                v1.0
   _______    ________    ___   ____ _______        ____  ______________
  / ____/ |  / / ____/   |__ \ / __ <  / __ \      / __ \/ ___/__  / __ \\
 / /    | | / / __/________/ // / / / / /_/ /_____/ /_/ / __ \  / / / / /
/ /___  | |/ / /__/_____/ __// /_/ / /\__, /_____/\__, / /_/ / / / /_/ /
\____/  |___/_____/    /____/\____/_//____/      /____/\____/ /_/\____/

                                   Developed By https://cappriciosec.com


CVE-2019-9670 : Bug scanner for WebPentesters and Bugbounty Hunters 

$ CVE-2019-9670 [option]

Usage: CVE-2019-9670 [options]
```


| Argument | Type     | Description                | Examples |
| :-------- | :------- | :------------------------- | :------------------------- |
| `-u` | `--url` | URL to scan | CVE-2019-9670 -u https://target.com |
| `-i` | `--input` | filename Read input from txt  | CVE-2019-9670 -i target.txt | 
| `-o` | `--output` | filename Write output in txt file | CVE-2019-9670 -i target.txt -o output.txt |
| `-c` | `--chatid` | Creating Telegram Notification | CVE-2019-9670 --chatid yourid |
| `-b` | `--blog` | To Read about CVE-2019-9670 Bug | CVE-2019-9670 -b |
| `-h` | `--help` | Help Menu | CVE-2019-9670 -h |



## 🔗 Links
[![Website](https://img.shields.io/badge/my_portfolio-000?style=for-the-badge&logo=ko-fi&logoColor=white)](https://cappriciosec.com/)
[![linkedin](https://img.shields.io/badge/linkedin-0A66C2?style=for-the-badge&logo=linkedin&logoColor=white)](https://www.linkedin.com/in/karthikeyan--v/)
[![twitter](https://img.shields.io/badge/twitter-1DA1F2?style=for-the-badge&logo=twitter&logoColor=white)](https://twitter.com/karthithehacker)



## Author

- [@karthithehacker](https://github.com/karthi-the-hacker/)



## Feedback

If you have any feedback, please reach out to us at contact@karthithehacker.com
File Snapshot

Log in to view the POC file snapshot cached by Shenlong Bot

Log in to view
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →