6345 matches found
NcStatusCheck
NcStatusCheck Centralized monitoring for multiple Nextcloud instances NcStatusCheck is a monitoring tool that lets you track the health of multiple Nextcloud servers from a single web interface: Nextcloud and PHP versions against their security floor, branch end of life, reachability, configurati...
Windmill/Nextcloud Flow < 1.603.3 - Unauthenticated Path Traversal
Windmill 1.603.3 contains a path traversal caused by unsanitized filename parameter in getlogfile endpoint, letting unauthenticated attackers read arbitrary files on the server, exploit requires no authentication. id: CVE-2026-29059 info: name: Windmill/Nextcloud Flow 1.603.3 - Unauthenticated Pa...
security-advisories
Security advisories This repository is the authoritative source for security advisories from the Nextcloud project: Advisories after May 2021 are published using GitHub's Security Advisory section Advisories before May 2021 can be found in the archived old/ folder as JSON files...
nextcloud-webhook-tokenneeded
abraxaslabs.tech Ā· github.com/abraxas Ā· @abraxasnull Ā· [email protected] Ā· nextcloud-webhook-tokenneeded Write-up: https://abraxaslabs.tech/research/nextcloud-webhook-tokenneeded nextcloud-webhook-tokenneeded Nextcloud Server 35.0.0 - Nextcloud GmbH WebhooksController::create nulls...
mailinabox
Mail-in-a-Box By @JoshData and contributors. Mail-in-a-Box helps individuals take back control of their email by defining a one-click, easy-to-deploy SMTP+everything else server: a mail server in a box. Please seehttps://mailinabox.email for the project's website and setup guide! Our goals are to...
CVE-2024-52510
Nextcloud X-E2EE-SIGNATURE Bypass POC Summary During normal operation of Nextcloud's E2EEv2 protocol, clients cryptographically sign folder-metadata before uploading to the server. This ensures the metadata has not been tampered with when it is re-fetched for the purposes of file-sharing or synci...
nextcloud_android
Nextcloud Android app Codacy Badge The Android client forNextcloud. Easily work with your data on your Nextcloud. How to contribute If you want to contribute to Nextcloud, you are very welcome: on our IRC channels and on freenode our forum at https://help.nextcloud.com for translations of the app...
CVE-2026-45156-POC
Hacker Matrix Glitch šØ CVE-2026-45156 šØ Nextcloud useroidc ID4me JWT Signature Bypass Fully Automated Proof of Concept PoC Exploit for Admin Takeover. š The Story Behind every CVE, there's a story. This one was found at 2 AM on a cold winter night, fueled by a breakup mashup on loop. Read the ful...
CLEANSTART-2024-WQ64584 Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud
Security vulnerability affects the nextcloud-client package. Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud...
CLEANSTART-2024-CR33815 Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server
Security vulnerability affects the nextcloud-client package. The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server...
CLEANSTART-2024-AL46857 Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server
Security vulnerability affects the nextcloud-client package. The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server...
CLEANSTART-2024-XX39699 Nextcloud is an open-source productivity platform
Security vulnerability affects the nextcloud-client package. Nextcloud is an open-source productivity platform...
CLEANSTART-2026-JP77981 Security fix for GHSA-gq4g-fpc9-vjfq applied in: nextcloud 32.0.3-r0
Security vulnerability affects the nextcloud package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-TI45715 Symfony is a PHP framework for web and console applications and a set of reusable PHP components
Security vulnerability affects the nextcloud package. Symfony is a PHP framework for web and console applications and a set of reusable PHP components...
CLEANSTART-2026-OJ49097 Symfony is a PHP framework for web and console applications and a set of reusable PHP components
Security vulnerability affects the nextcloud package. Symfony is a PHP framework for web and console applications and a set of reusable PHP components...
CLEANSTART-2026-TA47271 Symfony is a PHP framework for web and console applications and a set of reusable PHP components
Security vulnerability affects the nextcloud package. Symfony is a PHP framework for web and console applications and a set of reusable PHP components...
CLEANSTART-2026-LT27425 Symfony Polyfill backports PHP features and provides compatibility layers for extensions and functions
Security vulnerability affects the nextcloud package. Symfony Polyfill backports PHP features and provides compatibility layers for extensions and functions...
CLEANSTART-2026-LM83177 ### Description `Symfony\Component\Mime\Address` is the value-object every Symfony Mailer address (to/cc/bcc/from/reply-to) flows through; its constructor is documented as validating the address a...
Security vulnerability affects the nextcloud package. Description Symfony\Component\Mime\Address is the value-object every Symfony Mailer address to/cc/bcc/from/reply-to flows through; its constructor is documented as validating the address and throwing on invalid input, so developers treat it as...
CLEANSTART-2026-ME43994 Symfony is a PHP framework for web and console applications and a set of reusable PHP components
Security vulnerability affects the nextcloud package. Symfony is a PHP framework for web and console applications and a set of reusable PHP components...
CLEANSTART-2026-IV99657 Symfony is a PHP framework for web and console applications and a set of reusable PHP components
Security vulnerability affects the nextcloud package. Symfony is a PHP framework for web and console applications and a set of reusable PHP components...