1613 matches found
nextcloud-webhook-tokenneeded
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · nextcloud-webhook-tokenneeded Write-up: https://abraxaslabs.tech/research/nextcloud-webhook-tokenneeded nextcloud-webhook-tokenneeded Nextcloud Server 35.0.0 - Nextcloud GmbH WebhooksController::create nulls...
nextcloud-ldap-put-isadmin
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · nextcloud-ldap-put-isadmin Write-up: https://abraxaslabs.tech/research/nextcloud-ldap-put-isadmin nextcloud-ldap-put-isadmin Nextcloud Server 35.0.0 - Nextcloud GmbH PUT /cloud/users/id lets a delegated Users admin...
nextcloud-federated-ocm-token
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · nextcloud-federated-ocm-token Write-up: https://abraxaslabs.tech/research/nextcloud-federated-ocm-token nextcloud-federated-ocm-token Nextcloud Server 35.0.0 - Nextcloud GmbH A federated share secret is minted as an...
nextcloud-calendar-sharee-publish
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · nextcloud-calendar-sharee-publish Write-up: https://abraxaslabs.tech/research/nextcloud-calendar-sharee-publish nextcloud-calendar-sharee-publish Nextcloud Server 35.0.0 - Nextcloud GmbH CalDAV PublishPlugin only...
GHSA-QR28-FPJM-WQ7F vulnerabilities
Vulnerabilities for packages: vitess, nextcloud-server...
CVE-2026-118664 vulnerabilities
Vulnerabilities for packages: vitess, nextcloud-server...
PoC---CVE-2023-26482-RCE-LAB-Nextcloud
Next cloud Proof of Concept & Analysis Security Notice This repository reproduces a publicly disclosed and patched vulnerability in a controlled Docker lab environment for educational and research purposes. The environment is intentionally vulnerable and must only be deployed in isolated test...
GHSA-R925-MGVR-H9CC vulnerabilities
Vulnerabilities for packages: nextcloud-server...
CVE-2026-108082 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
Nextcloud Server resource management error vulnerability
A resource management error vulnerability exists in Nextcloud Server versions 22.0.0 through 34.0.0. This vulnerability arises because the federated sharing endpoint can write arbitrary rows to the ocshareexternal database table without any automatic cleanup mechanism, potentially leading to a...
GHSA-CG2G-XH64-V4Q7 vulnerabilities
Vulnerabilities for packages: wazuh-dashboard-fips, awx, langfuse-fips, librechat, supabase, wazuh-dashboard, opensearch-dashboards-fips, gitlab-rails-ce, opensearch-dashboards, nextcloud-server, gitlab-rails-ce-fips, langfuse...
GHSA-MRV2-3PQR-J5JR vulnerabilities
Vulnerabilities for packages: wazuh-dashboard-fips, awx, langfuse-fips, librechat, supabase, wazuh-dashboard, opensearch-dashboards-fips, gitlab-rails-ce, opensearch-dashboards, nextcloud-server, gitlab-rails-ce-fips, langfuse...
GHSA-C6GR-QVV4-5V3F vulnerabilities
Vulnerabilities for packages: wazuh-dashboard-fips, awx, langfuse-fips, librechat, supabase, wazuh-dashboard, opensearch-dashboards-fips, gitlab-rails-ce, opensearch-dashboards, nextcloud-server, gitlab-rails-ce-fips, langfuse...
GHSA-RQ7H-C2JC-7F22 vulnerabilities
Vulnerabilities for packages: langfuse-fips, gitlab-rails-ce, kubeflow-pipelines, nextcloud-server, gitlab-rails-ce-fips, langfuse...
GHSA-9JRQ-W75R-8GCW vulnerabilities
Vulnerabilities for packages: langfuse-fips, gitlab-rails-ce, kubeflow-pipelines, nextcloud-server, gitlab-rails-ce-fips, langfuse...
CVE-2026-112946 vulnerabilities
Vulnerabilities for packages: langfuse-fips, gitlab-rails-ce, kubeflow-pipelines, nextcloud-server, gitlab-rails-ce-fips, langfuse...
CVE-2026-112945 vulnerabilities
Vulnerabilities for packages: langfuse-fips, gitlab-rails-ce, kubeflow-pipelines, nextcloud-server, gitlab-rails-ce-fips, langfuse...
CVE-2026-112943 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, nextcloud-server, langfuse...