PoC---CVE-2023-26482-RCE-LAB-Nextcloud

Next cloud 概念验证与分析 安全声明 本仓库复现了一个已公开披露并修复的漏洞，在受控的 Docker 实验环境中用于教育和研究目的。 该环境故意设计为存在漏洞，必须只在隔离的测试环境中部署。禁止未经明确授权尝试利用任何系统。 本项目旨在展示漏洞分析、利用流程及缓解策略。 本实验复现了 CVE-2023-26482 ，一个 Nextcloud Server 中的缺失范围验证漏洞，允许经过身份验证的用户创建恶意工作流，若安装了“工作流脚本”应用，则可能导致远程代码执行RCE。 前提条件 Docker 和 Docker Compose Python 3 requests 库 安装 1...

GHSA-3MCP-22MF-VRW3 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, langfuse-fips, azurite, opensearch-dashboards, gitlab-rails-ce, lerna, kubeflow-centraldashboard, wazuh-dashboard-fips, wazuh-dashboard, semaphore, langfuse, jitsucom-jitsu, awx, gitlab-rails-ce-fips, kibana, nextcloud-server, librechat,...

CVE-2026-67321 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, kubeflow-centraldashboard, nextcloud-server, prism, lerna, langfuse, opensearch-dashboards...

GHSA-3MCP-22MF-VRW3 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, kubeflow-centraldashboard, nextcloud-server, prism, lerna, langfuse, opensearch-dashboards...

GHSA-5JGF-P345-68V8 vulnerabilities

Vulnerabilities for packages: unleash, arangodb, opensearch-dashboards-fips, langfuse-fips, unleash-proxy, opensearch-dashboards, vitess, keep-fips, wazuh-dashboard-fips, unleash-fips, wazuh-dashboard, tileserver-gl, yaml-language-server, langfuse, tileserver-gl-fips, gitlab-rails-ce-fips, kibana...

CVE-2026-67313 vulnerabilities

Vulnerabilities for packages: arangodb, opensearch-dashboards-fips, langfuse-fips, azurite, opensearch-dashboards, gitlab-rails-ce, lerna, kubeflow-centraldashboard, wazuh-dashboard-fips, wazuh-dashboard, semaphore, langfuse, awx, jitsucom-jitsu, gitlab-rails-ce-fips, kibana, nextcloud-server,...

GHSA-68JP-44VC-2X5H vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, langfuse-fips, azurite, opensearch-dashboards, gitlab-rails-ce, lerna, kubeflow-centraldashboard, wazuh-dashboard-fips, wazuh-dashboard, semaphore, langfuse, jitsucom-jitsu, awx, gitlab-rails-ce-fips, kibana, nextcloud-server, librechat,...

GHSA-39J5-W47M-2GMV vulnerabilities

Vulnerabilities for packages: lerna, opensearch-dashboards-fips, jitsucom-jitsu, awx, gitlab-rails-ce-fips, kubeflow-centraldashboard, semaphore, kibana, langfuse-fips, nextcloud-server, wazuh-dashboard-fips, wazuh-dashboard, librechat, langfuse, opensearch-dashboards, prism, gitlab-rails-ce,...

GHSA-6HQM-HM2V-3P2P vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, langfuse-fips, azurite, opensearch-dashboards, gitlab-rails-ce, lerna, kubeflow-centraldashboard, wazuh-dashboard-fips, wazuh-dashboard, semaphore, langfuse, jitsucom-jitsu, awx, gitlab-rails-ce-fips, kibana, nextcloud-server, librechat,...

GHSA-9WX3-P993-35VP vulnerabilities

Vulnerabilities for packages: arangodb, opensearch-dashboards-fips, langfuse-fips, azurite, opensearch-dashboards, gitlab-rails-ce, lerna, kubeflow-centraldashboard, wazuh-dashboard-fips, wazuh-dashboard, semaphore, langfuse, awx, jitsucom-jitsu, gitlab-rails-ce-fips, kibana, nextcloud-server,...

GHSA-FQJ3-H9PC-443H vulnerabilities

Vulnerabilities for packages: lerna, opensearch-dashboards-fips, jitsucom-jitsu, awx, gitlab-rails-ce-fips, kubeflow-centraldashboard, semaphore, kibana, langfuse-fips, nextcloud-server, wazuh-dashboard-fips, wazuh-dashboard, librechat, langfuse, opensearch-dashboards, prism, gitlab-rails-ce,...

CVE-2026-67318 vulnerabilities

Vulnerabilities for packages: lerna, opensearch-dashboards-fips, jitsucom-jitsu, awx, gitlab-rails-ce-fips, kubeflow-centraldashboard, semaphore, kibana, langfuse-fips, nextcloud-server, wazuh-dashboard-fips, wazuh-dashboard, librechat, langfuse, opensearch-dashboards, prism, gitlab-rails-ce,...

CVE-2026-67319 vulnerabilities

Vulnerabilities for packages: arangodb, opensearch-dashboards-fips, langfuse-fips, azurite, opensearch-dashboards, gitlab-rails-ce, lerna, kubeflow-centraldashboard, wazuh-dashboard-fips, wazuh-dashboard, semaphore, langfuse, awx, jitsucom-jitsu, gitlab-rails-ce-fips, kibana, nextcloud-server,...

GHSA-FQ2J-3J99-RX65 vulnerabilities

Vulnerabilities for packages: arangodb, opensearch-dashboards-fips, langfuse-fips, azurite, opensearch-dashboards, gitlab-rails-ce, lerna, kubeflow-centraldashboard, wazuh-dashboard-fips, wazuh-dashboard, semaphore, langfuse, awx, jitsucom-jitsu, gitlab-rails-ce-fips, kibana, nextcloud-server,...

GHSA-39J5-W47M-2GMV vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, kubeflow-centraldashboard, nextcloud-server, prism, lerna, langfuse, opensearch-dashboards...

CVE-2026-67315 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, kubeflow-centraldashboard, nextcloud-server, prism, lerna, langfuse, opensearch-dashboards...

CVE-2026-67317 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, kubeflow-centraldashboard, nextcloud-server, prism, lerna, langfuse, opensearch-dashboards...

GHSA-6HQM-HM2V-3P2P vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, kubeflow-centraldashboard, nextcloud-server, prism, lerna, langfuse, opensearch-dashboards...

CVE-2026-67319 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, kubeflow-centraldashboard, nextcloud-server, prism, lerna, langfuse, opensearch-dashboards...

GHSA-FQJ3-H9PC-443H vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, kubeflow-centraldashboard, nextcloud-server, prism, lerna, langfuse, opensearch-dashboards...