bugbounty

Full Passcode bypass on Nextcloud App iOS

Ability to read any emails through IDOR on Nextcloud Mail

Messages can still be seen on conversation after expiring when cron is misconfigured

Ability to control the filename when uploading a logo or favicon on theming

Passcode bypass on Talk Android app

File and Chat disclosure by calling the device while its in locked state

Nextcloud Talk ObjectId in share location can be set to open arbitrary URL or Deeplinks

Sophos Secure Workspace App Password Bypass using Race Condition

Breaking the Doors: Paypal 2-Factor Bypass

Non-Verified User can Submit Report,View Disclosed Reports | Secuna bug bounty

Insufficient Rate Limitting on Facebook Fundraisers