Skip to content
OpenAdvisories

Vendor

m1k1o

3 known vulnerabilities.

Products

neko 2 blog 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-39386

    Neko has Self-service Privilege Escalation for Authenticated Users

    Neko is a a self-hosted virtual browser that runs in Docker and uses WebRTC In versions 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1, any authenticated user can immediately obtain full administrative control of the entire Neko instance (member management, roo…

    m1k1o neko github.com/m1k1o/neko/server Go
  • High 8.5
    CVE-2022-23626 Public exploit

    Insufficient file checks in m1k1o/blog

    m1k1o/blog is a lightweight self-hosted facebook-styled PHP blog. Errors from functions `imagecreatefrom*` and `image*` have not been checked properly. Although PHP issued warnings and the upload function returned `false`, the original file (that could contai…

    m1k1o blog