Posts

It’s possible to fully access the user’s nextcloud files on Nextcloud App iOS by using the Files app on iPhone.

An attacker can access the mail box by ID getting the subjects and the first characters of the emails.

Nextcloud talk has a feature called Message Expiration, Chat messages can be expired after a certain time. In order for messages to be removed from the database, the cron jobs need to be executed. However what would be the failover if in some cases the cron did not execute?

When uploading a logo or favicon the filename can be controlled by attacker since the key can be modified which serves as the filename.

It is possible to bypass the passcode protection in nextcloud android talk by clicking the notification of a message.

Talk app allows access to sensitive chat messages on lockscreen during a call

It is possible to control the geolocation preview in the Nextcloud Talk app to point to a domain or deeplink which results to open-redirect.

A race condition in Sophos Secure Workspace (Android) version 9.7.3081 that bypassed the App Password.

Two-Factor Authentication bypass on Paypal

We could have avoided the biggest data breaches in the country if there is a platform or channel where Security Researchers can report Vulnerabilities, frankly we don’t have one.

WordPress Plugin Simple File List is prone to a vulnerability that lets attackers delete arbitrary files because the application fails to properly verify user-supplied input.

I was able to find a bug that lets me submit report,edit profile and view disclosed reports in secuna while using a rejected or non-verified account.

I found a exposed sensitive credential in the website and was able to access the Amazon S3 Bucket of Paylink, One of the digital platforms of QuadX. This allowed me to retrieve, upload and remove all files in the S3 Bucket.

The First Time CTF Experience with Jonelle H. Castañeda and Aeruc Maquilang was Really Good! Hats off to Pwn De Manila for Organizing this awesome Capture the Flag at Rootcon 13.

Facebook Fundraisers Lacks Rate Limiting Protection. Malicious actors can bruteforce this by sending different random credit or debit card numbers.

Some basic HTML tags were rendered as Markup in directory names.

A local, authenticated attacker can bypass the passcode in the VideoLAN VLC media player app before 3.1.5 for iOS by opening a URL and turning the phone.