nextcloud-webhook-tokenneeded

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · nextcloud-webhook-tokenneeded nextcloud-webhook-tokenneeded Nextcloud Server 35.0.0 - Nextcloud GmbH WebhooksController::create nulls tokenNeeded unless the caller is a full instance admin. update does not. A delegate...

PoC---CVE-2023-26482-RCE-LAB-Nextcloud

Next cloud Proof of Concept & Analysis Security Notice This repository reproduces a publicly disclosed and patched vulnerability in a controlled Docker lab environment for educational and research purposes. The environment is intentionally vulnerable and must only be deployed in isolated test...

nextcloud-ldap-put-isadmin

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · nextcloud-ldap-put-isadmin nextcloud-ldap-put-isadmin Nextcloud Server 35.0.0 - Nextcloud GmbH PUT /cloud/users/id lets a delegated Users admin edit a target unless that target is in the local group admin. PATCH on th...

nextcloud-calendar-sharee-publish

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · nextcloud-calendar-sharee-publish nextcloud-calendar-sharee-publish Nextcloud Server 35.0.0 - Nextcloud GmbH CalDAV PublishPlugin only checks DAV:write. Owner-limit limitAddressBookAndCalendarSharingToOwner defaults t...

nextcloud-federated-ocm-token

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · nextcloud-federated-ocm-token nextcloud-federated-ocm-token Nextcloud Server 35.0.0 - Nextcloud GmbH A federated share secret is minted as an unscoped PERMANENTTOKEN app password for the sharer. The recipient API...

GHSA-CG2G-XH64-V4Q7 vulnerabilities

Vulnerabilities for packages: awx, opensearch-dashboards, nextcloud-server, langfuse, gitlab-rails-ce, librechat, langfuse-fips, wazuh-dashboard, opensearch-dashboards-fips...

GHSA-MRV2-3PQR-J5JR vulnerabilities

Vulnerabilities for packages: awx, opensearch-dashboards, nextcloud-server, langfuse, gitlab-rails-ce, librechat, langfuse-fips, wazuh-dashboard, opensearch-dashboards-fips...

GHSA-C6GR-QVV4-5V3F vulnerabilities

Vulnerabilities for packages: awx, opensearch-dashboards, nextcloud-server, langfuse, gitlab-rails-ce, librechat, langfuse-fips, wazuh-dashboard, opensearch-dashboards-fips...

GHSA-9JRQ-W75R-8GCW vulnerabilities

Vulnerabilities for packages: nextcloud-server, langfuse, gitlab-rails-ce, langfuse-fips, kubeflow-pipelines, gitlab-rails-ce-fips...

GHSA-RQ7H-C2JC-7F22 vulnerabilities

Vulnerabilities for packages: nextcloud-server, langfuse, gitlab-rails-ce, langfuse-fips, kubeflow-pipelines, gitlab-rails-ce-fips...

CVE-2026-112945 vulnerabilities

Vulnerabilities for packages: nextcloud-server, langfuse, gitlab-rails-ce, langfuse-fips, kubeflow-pipelines, gitlab-rails-ce-fips...

CVE-2026-112946 vulnerabilities

Vulnerabilities for packages: nextcloud-server, langfuse, gitlab-rails-ce, langfuse-fips, kubeflow-pipelines, gitlab-rails-ce-fips...

GHSA-698V-4R3X-3VCV vulnerabilities

Vulnerabilities for packages: nextcloud-server, kubeflow-pipelines, langfuse...

CVE-2026-112943 vulnerabilities

Vulnerabilities for packages: nextcloud-server, kubeflow-pipelines, langfuse...

CVE-2026-112942 vulnerabilities

Vulnerabilities for packages: nextcloud-server, langfuse, commercial-gitlab-rails-ee-fips, gitlab-rails-ce, arangodb, langfuse-fips, kubeflow-pipelines, gitlab-rails-ce-fips...

CVE-2026-112944 vulnerabilities

Vulnerabilities for packages: nextcloud-server, langfuse, commercial-gitlab-rails-ee-fips, gitlab-rails-ce, arangodb, langfuse-fips, kubeflow-pipelines, gitlab-rails-ce-fips...

GHSA-R825-W8MM-5PXW vulnerabilities

Vulnerabilities for packages: nextcloud-server, langfuse, commercial-gitlab-rails-ee-fips, gitlab-rails-ce, arangodb, langfuse-fips, kubeflow-pipelines, gitlab-rails-ce-fips...

GHSA-587H-7WMJ-H5PM vulnerabilities

Vulnerabilities for packages: nextcloud-server, langfuse, commercial-gitlab-rails-ee-fips, gitlab-rails-ce, arangodb, langfuse-fips, kubeflow-pipelines, gitlab-rails-ce-fips...

GHSA-587H-7WMJ-H5PM vulnerabilities

Vulnerabilities for packages: nextcloud-server, kubeflow-pipelines, langfuse...

CVE-2026-112944 vulnerabilities

Vulnerabilities for packages: nextcloud-server, kubeflow-pipelines, langfuse...