PoC---CVE-2023-26482-RCE-LAB-Nextcloud

Next cloud إثبات المفهوم والتحليل إشعار أمني يستنسخ هذا المستودع ثغرة أمنية معلنة علنًا وتم تصحيحها في بيئة مختبر Docker مُتحكَّم بها لأغراض تعليمية وبحثية. هذه البيئة ضعيفة عن قصد ويجب نشرها فقط في بيئات اختبار معزولة. لا تحاول استغلال الأنظمة دون إذن صريح. الهدف من هذا المشروع هو توضيح تحليل...

CVE-2026-34156

🚨 CVE-2026-34156 - هروب حاسم من الصندوق الرملي في NocoBase غير مصادق / صلاحيات منخفضة → تنفيذ أوامر عن بعد كجذر في NocoBase 📌 نظرة عامة CVE-2026-34156 هي ثغرة خطيرة في الهروب من الصندوق الرملي في NocoBase منصة مفتوحة المصدر بدون كود/قليل الكود. يمكن للمهاجم الذي لديه القدرة على إنشاء أو تنفيذ عقد...

CVE-2026-61438

PraisonAI before 4.6.78 contains a remote code execution vulnerability in JobWorkflowExecutor.execinlinepython due to insufficient AST validation of workflow script steps. Attackers can create malicious YAML workflow files with import os statements followed by os.system calls that bypass sandbox...

CVE-2026-61438

PraisonAI before 4.6.78 has a remote code execution vulnerability in JobWorkflowExecutor._exec_inline_python() due to insufficient AST validation of workflow script steps. Attackers can craft malicious YAML workflow files with import os and subsequent os.system() calls to bypass sandbox checks an...

📄 NocoBase 2.0.27 Sandbox Escape / Remote Code Execution

NocoBase versions 2.0.27 and below suffer from a sandbox escape vulnerability in the Workflow Script Node. The console object passed into the Node.js vm sandbox context exposes host-realm WritableWorkerStdio stream objects via console.stdout. An authenticated attacker can traverse the prototype...

CVE-2026-34156 NocoBase Affected by Sandbox Escape to RCE via console._stdout Prototype Chain Traversal in Workflow Script Node

NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions. Prior to version 2.0.28, NocoBase's Workflow Script Node executes user-supplied JavaScript inside a Node.js vm sandbox with a custom require allowlist controlled by WORKFLOWSCRIPTMODUL...

CVE-2026-34156

NocoBase exposes a sandbox escape in the Workflow Script Node: an attacker can traverse the sandbox through the host console object (console._stdout/console._stderr) prototype chain to reach the Function constructor, access process, require child_process, and achieve Remote Code Execution as root...

CVE-2026-34156 NocoBase Affected by Sandbox Escape to RCE via console._stdout Prototype Chain Traversal in Workflow Script Node

NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions. Prior to version 2.0.28, NocoBase's Workflow Script Node executes user-supplied JavaScript inside a Node.js vm sandbox with a custom require allowlist controlled by WORKFLOWSCRIPTMODUL...

CVE-2026-34156: Improper Control of Dynamically-Managed Code Resources

NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions. Prior to version 2.0.28, NocoBase's Workflow Script Node executes user-supplied JavaScript inside a Node.js vm sandbox with a custom require allowlist controlled by WORKFLOWSCRIPTMODUL...

EUVD-2026-8645

LiveCode is an open-source, client-side code playground. Prior to commit e151c64c2bd80d2d53ac1333f1df9429fe6a1a11, LiveCode's i18n-update-pull GitHub Actions workflow is vulnerable to JavaScript injection. The title of the Pull Request associated with the triggering issue comment is interpolated...

📄 Nextcloud Workflows Remote Code Execution

This Metasploit module adds workflows as an authenticated user which can only be created by administrators by design. If the app "Nextcloud Workflow Script" is installed it is possible to generate a workflow that executes commands. This module requires Metasploit: https://metasploit.com/download...