Attackers exploited a flaw in an optional Nextcloud app, Collabora Online - Built-in CODE Server, to plant web shells on Nextcloud servers. Three administrators reported the issue on GitHub, with the first logged attack on September 10. A web shell is a small file that executes any command an attacker sends via a web request, with the rights of... Weiterlesen: Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora…
Intelligence View
⚡ tsecurity.de Intelligence
Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App
Attackers exploited a flaw in an optional Nextcloud app, Collabora Online - Built-in CODE Server, to plant web shells on Nextcloud servers. Three…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1505TA0011 · Command and Control
Server Software Component
Mitigation: M1018 User Account Management
Quelle: Kontext-Klassifikation des Artikeltextes
Command and Control
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
8 Quellen
GitHub Release: anthropics/claude-code v2.1.312 (27.10.2026)
7 weitere Quellen
GGitHubvor 38 Min.GitHub Release: google-gemini/gemini-cli v0.67.0-preview.0 (27.10.2026) GGitHubvor 19 Min.GitHub Release: google-gemini/gemini-cli v0.66.0 (27.10.2026) GGitHubvor 1 Std.A quick spoiler for GitHub Universe 2026 GGitHubvor 2 Std.GitHub Release: openai/codex vrust-v0.165.0 (27.10.2026) DDEV Communityvor 2 Std.Cursor vs Claude Code (2026): Which One Should Vibe Coders Pick? GGitHubvor 4 Std.GitHub Release: gohugoio/hugo v0.169.0 (27.10.2026)
+1
7 Quellen
Apple Fixes 163 iPhone, iPad Flaws in iOS 27.2 Update
6 weitere Quellen
MMacDailyNewsvor 45 Min.Apple’s iPhone 18 Pro series posts 3.1% higher initial global sales than hit iPhone 17 Pro, Counterpoint says SSlashdotvor 2 Std.Apple's Foldable iPhone Duo Draws Early Complaints of the Screen Cracking Nnetzwelt.devor 6 Std.Offiziell: Apple stellt neues MacBook Pro 14 mit M6 und langer Akkulaufzeit vor - es kostet exakt so viel wie das iPhone Duo Nnetzwelt.devor 4 Std.iOS 27.3: Diese Neuerungen plant Apple für euer iPhone - doch es gibt einen Haken TTechRepublicvor 6 Std.Apple Unveils New iPad mini: What You Get for $699 EEngadgetvor 4 Std.Apple iPhone Duo vs Google Pixel 11 Pro Fold: The differences beyond foldable style
7 Quellen
CVE-2024-58291 | Flatboard 3.2 Session Cookie cross site scripting (Exploit 52054 / EDB-52054)
6 weitere Quellen
VVulDB Updatesvor 1 Std.CVE-2024-46336 | kashipara School Management System 1.0 feedback.php cross site scripting VVulDB Updatesvor 1 Std.CVE-2024-58289 | Microweber 2.0.15 cross site scripting (Exploit 52058 / EUVD-2024-55342) VVulDB Updatesvor 1 Std.CVE-2024-5540 | Automated Logic WebCTRL 6.0/6.1/6.5/7.0 Login Panel cross site scripting (EUVD-2024-55102 / CNNVD-202511-2981) VVulDB Updatesvor 3 Std.CVE-2025-63418 | SelfBest Platform 2023.3 cross site scripting VVulDB Updatesvor 3 Std.CVE-2025-63448 | Water Management System 1.0 /edit_product.php cross site scripting VVulDB Updatesvor 3 Std.CVE-2025-63417 | SelfBest Platform 2023.3 Chat Message cross site scripting
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4271645/it-security-nachrichten/hackers-backdoor-nextcloud-servers-through-critical-flaw-in-collaboras-built-in-code-app/