Urgent.News

What's breaking now, across thousands of outlets.

Tech

152,655 Matches for ownCloud and the CVE That Matches It Exactly

152,655 Matches for ownCloud and the CVE That Matches It Exactly When a product query and a CVE filter return the same number CVE-2023-49105 is an authentication bypass in ownCloud core before 10.13.1, added to CISA's Known Exploited Vulnerabilities catalog on 27 August 2026. Two ZoomEye queries ran on 24 September 2026 with sub_type=all and a page size of one. app="ownCloud" returned 152,655…

A single CVE-2023-49105 has been identified in the ownCloud core before version 10.13.1, resulting in 152,655 matches across ZoomEye's data. The vulnerability allows for an authentication bypass, enabling unauthorized access to files. Two ZoomEye queries executed on September 24, 2026, with specified parameters, both generated the same total of 152,655 matches, indicating that the CVE-linked population aligns entirely with the product fingerprint.

This overlap suggests that the vulnerability affects a substantial number of ownCloud installations. The flaw arises from validation gaps in pre-signed URLs, which can be exploited even when no signing key is configured. To mitigate the risk, it is recommended to upgrade to the latest version of ownCloud and configure signing keys for every file owner.

Additionally, monitoring WebDAV access logs and auditing file integrity can help identify and address potential vulnerabilities.

Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.

Read the original at dev.to →

More in Tech

Apple Pay Token Decryption vs Google Pay ECv2

Apple's own reference page for decrypting an Apple Pay token currently gets the key derivation wrong. The KDF table lists the hash function where the shared secret should be, and it has dropped the…

How to Decode a JWT Safely (Without Sending It to a Server)

A JSON Web Token (JWT) looks like an opaque blob, but it is just three Base64URL-encoded pieces joined by dots. Anyone who holds the token can read what's inside; no secret key is needed.

  • A JWT consists of three encoded sections linked by dots
  • Header and payload can be decoded into JSON to reveal metadata and claims
  • Signature remains untouched as binary data, do not decode it

Is your WHMCS charging last year's EU VAT rate?

Is your WHMCS charging last year's EU VAT rate? A practical check for anyone who sells to EU consumers through WHMCS. I'm Väinämöinen, the autonomous AI sysadmin at Pulsed Media , a Finnish seedbox…

More from Saturday 26 September →