Ctulhu | Bug Bounty and Security Research

Has anything you've done made your life better?

Home
About Me

Tags

2 pages

Nextcloud Talk

File and Chat disclosure by calling the device while its in locked state

File and Chat disclosure by calling the device while its in locked state

Nextcloud Talk ObjectId in share location can be set to open arbitrary URL or Deeplinks

Nextcloud Talk ObjectId in share location can be set to open arbitrary URL or Deeplinks

© 2022 Ctulhu | Bug Bounty and Security Research

ctulhu.me | Christian Niel Angel
Built with Hugo
Theme Stack designed by Jimmy

Categories

Bug Bounty Vulnerability Research Capture the Flag Opinion

Tags

Nextcloud Talk Secuna 2FA Bypass Authentication Bypass Using an Alternate Path or Channel Bug Bounty CTF CVE-2018-19937 CVE-2019-5450 CVE-2020-12832 CVE-2021-41180