6209 matches found
mailinabox
Mail-in-a-Box By @JoshData and contributors. Mail-in-a-Box helps individuals take back control of their email by defining a one-click, easy-to-deploy SMTP+everything else server: a mail server in a box. Please seehttps://mailinabox.email for the project's website and setup guide! Our goals are to...
EUVD-2026-100780
Collabora Online Built-in CODE Server before 26.4.303 richdocumentscode, a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS command injection in proxy.php when the CODE server isn't...
Windmill/Nextcloud Flow < 1.603.3 - Unauthenticated Path Traversal
Windmill 1.603.3 contains a path traversal caused by unsanitized filename parameter in getlogfile endpoint, letting unauthenticated attackers read arbitrary files on the server, exploit requires no authentication. id: CVE-2026-29059 info: name: Windmill/Nextcloud Flow 1.603.3 - Unauthenticated Pa...
CVE-2024-52510
Nextcloud X-E2EE-SIGNATURE Bypass POC Summary During normal operation of Nextcloud's E2EEv2 protocol, clients cryptographically sign folder-metadata before uploading to the server. This ensures the metadata has not been tampered with when it is re-fetched for the purposes of file-sharing or synci...
nextcloud_android
Nextcloud Android app Codacy Badge The Android client forNextcloud. Easily work with your data on your Nextcloud. How to contribute If you want to contribute to Nextcloud, you are very welcome: on our IRC channels and on freenode our forum at https://help.nextcloud.com for translations of the app...
CVE-2026-45156-POC
Hacker Matrix Glitch 🚨 CVE-2026-45156 🚨 Nextcloud useroidc ID4me JWT Signature Bypass Fully Automated Proof of Concept PoC Exploit for Admin Takeover. 📖 The Story Behind every CVE, there's a story. This one was found at 2 AM on a cold winter night, fueled by a breakup mashup on loop. Read the ful...
CVE-2026-52782
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-52782 CVE-2026-52782 OpenProject 17.3.2 - OpenProject GmbH I am @abraxasnull. Loopback lab. The client is CVE-2026-52782-Abraxas-Labs.py. IDOR on managed folders. Storages::ProjectStorages::BaseContract...
NcStatusCheck
NcStatusCheck Centralized monitoring for multiple Nextcloud instances NcStatusCheck is a monitoring tool that lets you track the health of multiple Nextcloud servers from a single web interface: Nextcloud and PHP versions against their security floor, branch end of life, reachability, configurati...
PoC---CVE-2023-26482-RCE-LAB-Nextcloud
Next cloud Proof of Concept & Analysis Security Notice This repository reproduces a publicly disclosed and patched vulnerability in a controlled Docker lab environment for educational and research purposes. The environment is intentionally vulnerable and must only be deployed in isolated test...
security-advisories
Security advisories This repository is the authoritative source for security advisories from the Nextcloud project: Advisories after May 2021 are published using GitHub's Security Advisory section Advisories before May 2021 can be found in the archived old/ folder as JSON files...
CVE-2026-102414 vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee, gitlab-rails-ce-fips, commercial-gitlab-rails-ee-fips, nextcloud-server...
GHSA-477H-4R7F-FVRX vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee, gitlab-rails-ce-fips, commercial-gitlab-rails-ee-fips, nextcloud-server...
GHSA-477H-4R7F-FVRX vulnerabilities
Vulnerabilities for packages: nextcloud-server...
CVE-2026-102414 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
GHSA-G2V6-RQMX-R4W6 vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee, langfuse-fips, gitlab-rails-ce-fips, commercial-gitlab-rails-ee-fips, langfuse, nextcloud-server...
GHSA-68FV-2MGG-JV7Q vulnerabilities
Vulnerabilities for packages: vitess, langfuse, renovate, nextcloud-server, opensearch-dashboards, jupyter-base-notebook, saf, rancher-api-ui...
CVE-2026-93749 vulnerabilities
Vulnerabilities for packages: vitess, langfuse, renovate, nextcloud-server, opensearch-dashboards, jupyter-base-notebook, saf, rancher-api-ui...
GHSA-P98J-92PF-MC4P vulnerabilities
Vulnerabilities for packages: nextcloud-server...
CVE-2026-66010 vulnerabilities
Vulnerabilities for packages: jupyter-base-notebook, kibana, tensorflow-gpu-jupyter, langfuse-fips, wazuh-dashboard, librechat, gitlab-rails-ce-fips, opensearch-dashboards-fips, wazuh-dashboard-fips, opensearch-dashboards, langfuse, gitlab-rails-ce, awx, nextcloud-server...