Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App

Attackers exploited a flaw in an optional Nextcloud app, Collabora Online – Built-in CODE Server, to plant web shells on Nextcloud servers. Three administrators reported the issue on GitHub, with the first logged attack on September 10.

A web shell is a small file that executes any command an attacker sends via a web request, with the rights of the web server account. The flaw

Source: The Hacker News

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

Google Workspace thinks my domain is an email provider (2025)

Google Workspace thinks my domain is an email provider (2025) Source: Hacker News

System call instrumentation on Linux/x86‑64 using memory‑indirect calls, part I

System call instrumentation on Linux/x86‑64 using memory‑indirect calls, part I Source: Hacker News

Attack Update: Top 5 Attack-IPs auf doode.info – 20.09.2026

Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 74.7.227.149 — 1516 requests (recent log) 89.167.35.212 — 919 requests (recent log) 103.253.27.215 — 839 requests (recent