Hacker Activity Filter By Public hackerone.com https://hackerone.com/hacktivity https://hackerone.com/reports/3625210 [$150] Nextcloud: PIN bypass in PassCodeActivity via back button]]> https://hackerone.com/reports/3617729 [$250] Nextcloud: Mail contact autocomplete bypasses administrator-configured user enumeration restrictions and expose member information outside the intended scope]]> https://hackerone.com/reports/3610332 [$150] Nextcloud: Approval app's file-freshness check can be bypassed by omitting the etag parameter, allowing approval of unreviewed file changes]]> https://hackerone.com/reports/3599470 Nextcloud: Improper input validation in emoji field leads to sidebar UI denial of service]]> https://hackerone.com/reports/3599383 [$200] Nextcloud: Arbitrary Board Preference Injection via Deck Config API]]> https://hackerone.com/reports/4025056 curl: HTTP/1.1 response framing violation and unsafe connection reuse when transfer decoding is disabled]]> https://hackerone.com/reports/4033971 curl: Use-after-free of the internal multi->admin easy handle via the documented CURLMOPT_NOTIFYFUNCTION callback]]> https://hackerone.com/reports/4021960 curl: TELNET control and environment data bypass HTTPS-proxy TLS]]> https://hackerone.com/reports/3770482 Nextcloud: files_lock: a write-share collaborator can place a TYPE_TOKEN lock that permanently denies the file owner, survives share revocation and account delet]]> https://hackerone.com/reports/3913012 Nextcloud: Persistent SMTP header injection via identity `organization` / `name`]]> https://hackerone.com/reports/4021952 curl: Socket API drops expired timeouts for transfers queued behind a connection limit]]> https://hackerone.com/reports/3572848 [$150] Nextcloud: Group restriction bypass via bearer token in user_oidc (SETTING_RESTRICT_LOGIN_TO_GROUPS not enforced in Backend::getCurrentUserId)]]> https://hackerone.com/reports/4020767 Essity: Unauthenticated API allows reading, writing to and deleting any user's private chat history on ████████]]> https://hackerone.com/reports/3522157 [$500] DuckDuckGo: SSRF with bypass leads to client side hosting / vulnerabilities ( XSS and others )]]> https://hackerone.com/reports/3683934 Monero: sign_multisig crashes monero-wallet-rpc on a malformed but decryptable multisig txset]]> https://hackerone.com/reports/3683886 Monero: Restricted ZMQ RPC bypasses HTTP restricted-mode resource checks]]> https://hackerone.com/reports/3681690 Monero: ZMQ get_output_distribution duplicate amount DoS]]> https://hackerone.com/reports/3301553 Nextcloud: Cross-User Lock/Unlock via Absolute DAV Path]]> https://hackerone.com/reports/3506873 Nextcloud: Shared smart albums in the Photos app can expose files outside the album owner's configured source folders]]> https://hackerone.com/reports/3674940 Nextcloud: Critical broken access control: API-only delegated admin can enumerate all Team Folders and grant access to arbitrary groups]]> https://hackerone.com/reports/3533697 Nextcloud: Public collectives allow to create pages]]> https://hackerone.com/reports/3303283 Nextcloud: Unauthenticated blind SSRF in Circles signature verification bypasses Nextcloud local-address protections]]> https://hackerone.com/reports/3484601 [$200] Nextcloud: Team membership information returned on API level based on ID]]> https://hackerone.com/reports/3633123 AWS VDP: Incomplete Input Sanitization in CodeInterpreter install_packages Allows Command Injection via pip Flags]]> https://hackerone.com/reports/3621588 Monero: Authenticated `unsigned_txset` change spoof lets a malicious hot wallet steal cold-signer change]]>