Groupware — PoC Archivehttps://poc.intelseclab.com/tags/groupware/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000Group-Office TNEF Attachment Handler OS Command Injection (CVE-2026-25512)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-25512-groupoffice-tnef-command-injection/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-25512-groupoffice-tnef-command-injection/Critical severity (CVSS 9.4) — web · CVE-2026-25512. Status: Weaponized. Affects: Group-Office groupware/webmail suite. Tags: command-injection, rce, groupware, email, tnef, cwe-78, authenticated, webmail.webCriticalcommand-injectionrcegroupwareemailtnefcwe-78authenticatedwebmailGroup-Office PHP Deserialization Remote Code Execution (CVE-2026-34838)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-34838-groupoffice-deserialization-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-34838-groupoffice-deserialization-rce/Critical severity — web · CVE-2026-34838 (GHSA-h22j-frrf-5vxq). Status: PoC. Affects: Group-Office groupware suite. Tags: php, deserialization, rce, groupware, gadget-chain, authenticated, group-office, guzzlehttp.webCriticalphpdeserializationrcegroupwaregadget-chainauthenticatedgroup-officeguzzlehttp