Lucene search
+L

5186 matches found

Kitploit
Kitploit
added 2026/09/02 4:26 p.m.5 views

NcStatusCheck

NcStatusCheck Centralized monitoring for multiple Nextcloud instances NcStatusCheck is a monitoring tool that lets you track the health of multiple Nextcloud servers from a single web interface. It analyzes Nextcloud and PHP versions and provides update recommendations. 🎯 Features Monitoring...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/02 2:38 p.m.3 views

mailinabox

Mail-in-a-Box @JoshData とコントリビューターによるプロジェクトです。 Mail-in-a-Box は、ワンクリックで簡単にデプロイできる SMTP+その他すべてのサーバー、すなわち「箱の中のメールサーバー」を定義することで、個人が自分のメールの制御を取り戻すのを支援します。 プロジェクトのウェブサイトとセットアップガイドはhttps://mailinabox.email をご覧ください! 私たちの目標は次のとおりです: 優れたメールサーバーのデプロイを簡単にすること。 ウェブ上の非中央集権化、イノベーション、プライバシーを促進すること。...

5.9AI score
SaveExploits0References10
Nuclei
Nuclei
added 2026/09/02 7:49 a.m.22 views

Windmill/Nextcloud Flow < 1.603.3 - Unauthenticated Path Traversal

Windmill 1.603.3 contains a path traversal caused by unsanitized filename parameter in getlogfile endpoint, letting unauthenticated attackers read arbitrary files on the server, exploit requires no authentication. id: CVE-2026-29059 info: name: Windmill/Nextcloud Flow 1.603.3 - Unauthenticated Pa...

7.5CVSS7.3AI score0.02945EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/02 7:09 a.m.5 views

CVE-2024-52510

Nextcloud X-E2EE-SIGNATURE バイパス POC 概要 NextcloudのE2EEv2プロトコルの通常動作では、クライアントはフォルダメタデータに暗号署名を行ってからサーバーにアップロードします。これにより、ファイル共有や変更同期のためにメタデータが再取得された際に、改ざんされていないことが保証されます。 署名検証は、クライアントがfoldermetadata.cpp:177で、取得したメタデータを初期化する際に行われます。しかし、悪意のあるサーバーがこのチェックをバイパスする方法は2つあります:...

7.5CVSS5.8AI score0.00738EPSS
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/01 11:52 p.m.5 views

nextcloud_android

Nextcloud Android アプリ Codacy Badge Nextcloud 用の Android クライアントです。Nextcloud 上のデータを簡単に操作できます。 コントリビュート方法 Nextcloud にコントリビュートしたい方は、大歓迎です: freenode 上の IRC チャンネル と にて フォーラム https://help.nextcloud.com アプリの翻訳は Transifex にて Issue や PR を開くこと(対応する Issue を含む) コントリビューションガイドラインとライセンス GPLv2...

5.9AI score
SaveExploits0References9
Chainguard
Chainguard
added 2026/09/01 8:24 p.m.4 views

CVE-2026-67312 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, kibana, langfuse, jitsucom-jitsu, opensearch-dashboards-fips, redisinsight, lerna, prism, semaphore, nextcloud-server, awx, langfuse-fips, kubeflow-centraldashboard, librechat, wazuh-dashboard, azurite, opensearch-dashboards...

7.5CVSS6.1AI score0.00339EPSS
SaveExploits1
Chainguard
Chainguard
added 2026/09/01 8:24 p.m.3 views

GHSA-F2R5-PQH9-R8F8 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, kibana, langfuse, jitsucom-jitsu, opensearch-dashboards-fips, redisinsight, lerna, prism, semaphore, nextcloud-server, awx, langfuse-fips, kubeflow-centraldashboard, librechat, wazuh-dashboard, azurite, opensearch-dashboards...

5.9AI score
SaveExploits0
Chainguard
Chainguard
added 2026/09/01 8:24 p.m.5 views

GHSA-4WW2-RJH2-XPV9 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, kibana, langfuse, jitsucom-jitsu, opensearch-dashboards-fips, redisinsight, lerna, prism, semaphore, nextcloud-server, awx, langfuse-fips, kubeflow-centraldashboard, librechat, wazuh-dashboard, azurite, opensearch-dashboards...

5.9AI score
SaveExploits0
Chainguard
Chainguard
added 2026/09/01 8:24 p.m.5 views

CVE-2026-67316 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, kibana, langfuse, jitsucom-jitsu, opensearch-dashboards-fips, redisinsight, lerna, prism, semaphore, nextcloud-server, awx, langfuse-fips, kubeflow-centraldashboard, librechat, wazuh-dashboard, azurite, opensearch-dashboards...

7.4CVSS5.9AI score0.00279EPSS
SaveExploits1
Wolfi
Wolfi
added 2026/09/01 8:23 p.m.6 views

CVE-2026-67312 vulnerabilities

Vulnerabilities for packages: prism, kubeflow-centraldashboard, langfuse, nextcloud-server, opensearch-dashboards, jitsucom-jitsu, lerna...

7.5CVSS6.1AI score0.00339EPSS
SaveExploits1
Wolfi
Wolfi
added 2026/09/01 8:23 p.m.5 views

CVE-2026-67316 vulnerabilities

Vulnerabilities for packages: prism, kubeflow-centraldashboard, langfuse, nextcloud-server, opensearch-dashboards, jitsucom-jitsu, lerna...

7.4CVSS5.9AI score0.00279EPSS
SaveExploits1
Wolfi
Wolfi
added 2026/09/01 8:23 p.m.5 views

GHSA-F2R5-PQH9-R8F8 vulnerabilities

Vulnerabilities for packages: prism, kubeflow-centraldashboard, langfuse, nextcloud-server, opensearch-dashboards, jitsucom-jitsu, lerna...

5.9AI score
SaveExploits0
Wolfi
Wolfi
added 2026/09/01 8:23 p.m.6 views

GHSA-4WW2-RJH2-XPV9 vulnerabilities

Vulnerabilities for packages: prism, kubeflow-centraldashboard, langfuse, nextcloud-server, opensearch-dashboards, jitsucom-jitsu, lerna...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 6:35 a.m.3 views

CVE-2026-45156-POC

ハッカー・マトリックス・グリッチ 🚨 CVE-2026-45156 🚨 Nextcloud useroidc ID4me JWT 署名バイパス 管理者乗っ取りのための完全自動化された概念実証(PoC)エクスプロイト 📖 物語 すべてのCVEの背後には物語があります。これは、別れのマッシュアップをループで流しながら、寒い冬の夜の午前2時に発見されました。完全な技術的詳細、感情のジェットコースター、そして学んだゼロトラストの教訓をお読みください: 🔗 ブログ記事全文はこちら リンク先はあなたのブログ記事 🎯 脆弱性概要 Nextcloudのuseroidcアプリは、ID4me...

8.1CVSS7.2AI score0.00412EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/28 9:21 a.m.5 views

PoC---CVE-2023-26482-RCE-LAB-Nextcloud

नेक्स्ट क्लाउड प्रमाण की अवधारणा और विश्लेषण सुरक्षा सूचना यह रिपॉज़िटरी शैक्षिक और अनुसंधान उद्देश्यों के लिए एक नियंत्रित Docker प्रयोगशाला वातावरण में सार्वजनिक रूप से प्रकट और पैच की गई भेद्यता को पुन: प्रस्तुत करती है। यह वातावरण जानबूझकर कमजोर है और इसे केवल पृथक परीक्षण वातावरण में ही तैना...

9CVSS7.2AI score0.04176EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/28 5:42 a.m.4 views

security-advisories

Avvisi di sicurezza Questo repository è la fonte autorevole per gli avvisi di sicurezza del progetto Nextcloud: Gli avvisi successivi a maggio 2021 vengono pubblicati tramite la sezione Security Advisory di GitHub Gli avvisi precedenti a maggio 2021 si trovano nella cartella old/ archiviata, come...

5.9AI score
SaveExploits0References2
Circl
Circl
added 2026/08/25 6:08 p.m.10 views

CVE-2026-55640

creationtimestamp| type| source ---|---|--- 2026-08-25 18:08:31+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtwfys2tk52p 2026-08-25 18:35:19+00:00| published-proof-of-concept| https://github.com/cbcoutinho/nextcloud-mcp-server/security/advisories/GHSA-8vh3-g2qg-2h2c 2026-08-2...

9.1CVSS4.8AI score0.00484EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/25 4:16 p.m.10 views

CVE-2026-55640

Nextcloud MCP Server is a production-ready MCP server that connects AI assistants to a Nextcloud instance. Prior to 0.117.2, the POST /webhooks/nextcloud endpoint in nextcloudmcpserver/vector/webhookreceiver.py has no authentication by default because WEBHOOKSECRET defaults to None and startup...

9.1CVSS0.00484EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2026/08/25 4:04 p.m.8 views

nextcloud-mcp-server: Unauthenticated `POST /webhooks/nextcloud` allows arbitrary vector data deletion when `WEBHOOK_SECRET` is unset ( default )

Summary The POST /webhooks/nextcloud endpoint has no authentication by default: WEBHOOKSECRET defaults to None and is never required by startup validation. When unset, the receiver accepts any unauthenticated POST. The userid is taken directly from the attacker-supplied payload and passed to...

9.1CVSS5.4AI score0.00484EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2026/08/25 4:03 p.m.29 views

CVE-2026-55640 Nextcloud MCP Server: Unauthenticated `POST /webhooks/nextcloud` allows arbitrary vector data deletion when `WEBHOOK_SECRET` is unset ( default )

Nextcloud MCP Server is a production-ready MCP server that connects AI assistants to a Nextcloud instance. Prior to 0.117.2, the POST /webhooks/nextcloud endpoint in nextcloudmcpserver/vector/webhookreceiver.py has no authentication by default because WEBHOOKSECRET defaults to None and startup...

9.1CVSS0.00484EPSS
SaveExploits0References3
Rows per page
Query Builder