🎯 New Report #3328343: Lack of minimum value bid wheel verification on customer bid in Rental Trips
🔺Severity: Low
👽 Reporter: sameer ali
⭐️ Reputation: 592
🛠 State: resolved
💼 Team: Bykea
💵 Bounty: null
🕐 Submitted: 2025-09-05
⏰ Disclosed: 2025-11-20 05:46:58
📝 Summary: A missing validation on the customer bid field when creating rental trips allowed passengers to submit arbitrary bid amounts, including very low fares. Proper validation was added to prevent unrealistic values.
📂 Report JSON File: 3328343
@hackeronereports

🎯 New Report #3295503: Customer can cancel a individual booking in a batch, causing locking of partner.
🔺Severity: Medium
👽 Reporter: sameer ali
⭐️ Reputation: 592
🛠 State: resolved
💼 Team: Bykea
💵 Bounty: null
🕐 Submitted: 2025-08-12
⏰ Disclosed: 2025-11-20 05:32:17
📝 Summary: The vulnerability allowed users to update the status of individual trips inside a batch, even though only batch-level status changes were intended. By cancelling the single trip inside a one-parcel batch, the batch was placed into an inconsistent state, causing the assigned partner to become stuck in a booking they could not complete or cancel.
📂 Report JSON File: 3295503
@hackeronereports

🎯 New Report #3328367: Path traversal via archive.extract - CVE 2021-3281 incomplete patch
🔺Severity: Low
👽 Reporter: stackered
⭐️ Reputation: 198
🛠 State: resolved
💼 Team: Django
💵 Bounty: null
🕐 Submitted: 2025-09-05
⏰ Disclosed: 2025-11-21 19:05:24
📝 Summary: A vulnerability was discovered in the "extract" function of the ZipArchive and TarArchive classes in the Django framework. The vulnerability was caused by the use of the "abspath" function, which removes terminating path separators. This made the guard logic protection insufficient to protect against partial-path traversal. As a result, an attacker could potentially write files outside of the base directory when unzipping archives.
📂 Report JSON File: 3328367
@hackeronereports

🎯 New Report #3329310: Improper bot-authentication allows to impersonate any user when sending messages in a room
🔺Severity: High
👽 Reporter: stackered
⭐️ Reputation: 198
🛠 State: resolved
💼 Team: Basecamp
💵 Bounty: 2000
🕐 Submitted: 2025-09-06
⏰ Disclosed: 2025-11-21 19:39:42
📝 Summary: A vulnerability was discovered in the bot authentication mechanism. The issue allowed an unauthenticated user to impersonate any user and post messages in rooms the impersonated user had access to. The bot authentication function failed to properly validate the bot key, allowing a partial key to match a valid user record.
📂 Report JSON File: 3329310
@hackeronereports

🎯 New Report #3434543: Arbitrary free in curl's config file parsing.
🔺Severity: Low
👽 Reporter: letshack9707
⭐️ Reputation: 100
🛠 State: informative
💼 Team: curl
💵 Bounty: null
🕐 Submitted: 2025-11-20
⏰ Disclosed: 2025-11-23 16:03:02
📝 Summary: null
📂 Report JSON File: 3434543
@hackeronereports

🎯 New Report #3426761: HTML Injection in Emails on login.mtb.com via givenName parameter leads to phishing attacks
🔺Severity: Medium
👽 Reporter: ozgun32
⭐️ Reputation: 207
🛠 State: resolved
💼 Team: M T Bank Vulnerability Disclosure
💵 Bounty: null
🕐 Submitted: 2025-11-15
⏰ Disclosed: 2025-11-24 14:07:16
📝 Summary: A vulnerability was found that allowed HTML injection in emails on login.mtb.com via the givenName parameter. This vulnerability could have enabled phishing attacks.
📂 Report JSON File: 3426761
@hackeronereports

🎯 New Report #3432833: [SFTP TOCTOU Race Condition in Upload Resume Logic Leads to Arbitrary File Append](https://hackerone.com/reports/3432833)
🔺Severity: Medium
👽 Reporter: cainvsilf
⭐️ Reputation: 100
🛠 State: informative
💼 Team: curl
💵 Bounty: null
🕐 Submitted: 2025-11-19
⏰ Disclosed: 2025-11-24 18:55:10
📝 Summary: null
📂 Report JSON File: 3432833
@hackeronereports

🎯 New Report #1916400: High resource consumption by insufficient sanitization of forum threads pagination
🔺Severity: Medium
👽 Reporter: maskopatol
⭐️ Reputation: 3795
🛠 State: resolved
💼 Team: Flickr
💵 Bounty: 479
🕐 Submitted: 2023-03-24
⏰ Disclosed: 2025-11-24 22:33:46
📝 Summary: The forum threads pagination functionality was insufficiently sanitized, leading to high resource consumption. When a page number was provided in the URL that exceeded the number of available pages, an infinite loop was triggered, generating excessive markup on each iteration. The issue was resolved by correcting the logic to avoid generating links to non-existent pages.
📂 Report JSON File: 1916400
@hackeronereports

🎯 New Report #3434156: Username Validation Bypass
🔺Severity: Medium
👽 Reporter: kassem s94
⭐️ Reputation: 10331
🛠 State: resolved
💼 Team: Revive Adserver
💵 Bounty: null
🕐 Submitted: 2025-11-19
⏰ Disclosed: 2025-11-26 14:18:23
📝 Summary: null
📂 Report JSON File: 3434156
@hackeronereports

🎯 New Report #2932960: [my.stripo.email Blind SSRF Vulnerability in Stripo App Export via Missing Endpoints Export Email Message to Zapier](https://hackerone.com/reports/2932960)
🔺Severity: Critical
👽 Reporter: odaysec
⭐️ Reputation: null
🛠 State: resolved
💼 Team: Stripo Inc
💵 Bounty: null
🕐 Submitted: 2025-01-13
⏰ Disclosed: 2025-12-01 08:22:34
📝 Summary: A critical Blind SSRF (Server-Side Request Forgery) vulnerability was identified in the export service of the Stripo app. The vulnerability existed in the endpoint /exportservice/v3/exports/WEBHOOK/accounts, where malicious input could be provided in the webhookUrl parameter, triggering SSRF and allowing the server to make unauthorized HTTP requests to attacker-controlled systems.
📂 Report JSON File: 2932960
@hackeronereports

🎯 New Report #3417967: Potential SQL Injection when annotating FilteredRelation on PostgreSQL
🔺Severity: High
👽 Reporter: stackered
⭐️ Reputation: 212
🛠 State: resolved
💼 Team: Django
💵 Bounty: null
🕐 Submitted: 2025-11-09
⏰ Disclosed: 2025-12-02 15:28:06
📝 Summary: A potential SQL injection vulnerability was discovered in Django's annotation of FilteredRelation on PostgreSQL. The vulnerability was caused by an incomplete regular expression filter in the FORBIDDEN ALIAS PATTERN. This allowed user input to be interpreted as raw strings, potentially enabling the execution of malicious SQL queries. The vulnerability was reported to the Django security team.
📂 Report JSON File: 3417967
@hackeronereports

🎯 New Report #2890071: admin audit does not log actions on files in a group folder
🔺Severity: Medium
👽 Reporter: klipz
⭐️ Reputation: 107
🛠 State: resolved
💼 Team: Nextcloud
💵 Bounty: null
🕐 Submitted: 2024-12-09
⏰ Disclosed: 2025-12-05 08:22:06
📝 Summary: The admin audit app in Nextcloud versions prior to 24.0.4 did not log actions on files in a group folder.
📂 Report JSON File: 2890071
@hackeronereports

🎯 New Report #3247499: Deck app allowed user with "Can share" permission to modify permissions of other non-owners
🔺Severity: Medium
👽 Reporter: daroo
⭐️ Reputation: 460
🛠 State: resolved
💼 Team: Nextcloud
💵 Bounty: 250
🕐 Submitted: 2025-07-11
⏰ Disclosed: 2025-12-05 08:20:21
📝 Summary: The Deck app in Nextcloud allowed users with "Can share" permission to modify the permissions of other non-owners.
📂 Report JSON File: 3247499
@hackeronereports

🎯 New Report #3275810: Calendar app allowed booking appointments without the generated token
🔺Severity: Low
👽 Reporter: daroo
⭐️ Reputation: 460
🛠 State: resolved
💼 Team: Nextcloud
💵 Bounty: null
🕐 Submitted: 2025-07-29
⏰ Disclosed: 2025-12-05 08:18:39
📝 Summary: The calendar app was found to allow booking appointments without the necessary generated token, which could have led to unauthorized access.
📂 Report JSON File: 3275810
@hackeronereports

🎯 New Report #3112033: Calendar attachments of local files are offered to downloaded
🔺Severity: Medium
👽 Reporter: daroo
⭐️ Reputation: 460
🛠 State: resolved
💼 Team: Nextcloud
💵 Bounty: 100
🕐 Submitted: 2025-04-25
⏰ Disclosed: 2025-12-05 08:18:13
📝 Summary: A security vulnerability in calendar attachments of local files was discovered, where users were offered to download the attachments.
📂 Report JSON File: 3112033
@hackeronereports

🎯 New Report #3137895: Missing ownership check in Tables app allows moving columns into tables of other users
🔺Severity: Medium
👽 Reporter: daroo
⭐️ Reputation: 460
🛠 State: resolved
💼 Team: Nextcloud
💵 Bounty: 250
🕐 Submitted: 2025-05-10
⏰ Disclosed: 2025-12-05 08:17:45
📝 Summary: The Tables app in the specified software had a vulnerability that allowed moving columns into tables of other users without proper ownership checks.
📂 Report JSON File: 3137895
@hackeronereports

🎯 New Report #3138721: Tables app allowed users to view columns metadata information of any table
🔺Severity: Medium
👽 Reporter: daroo
⭐️ Reputation: 460
🛠 State: resolved
💼 Team: Nextcloud
💵 Bounty: 250
🕐 Submitted: 2025-05-11
⏰ Disclosed: 2025-12-05 08:17:22
📝 Summary: The Tables app allowed users to view columns metadata information of any table.
📂 Report JSON File: 3138721
@hackeronereports

🎯 New Report #3247386: Participants were able to blindly delete poll drafts of other users by ID
🔺Severity: Medium
👽 Reporter: daroo
⭐️ Reputation: 460
🛠 State: resolved
💼 Team: Nextcloud
💵 Bounty: 150
🕐 Submitted: 2025-07-11
⏰ Disclosed: 2025-12-05 08:16:59
📝 Summary: Participants were able to blindly delete poll drafts of other users by ID.
📂 Report JSON File: 3247386
@hackeronereports

🎯 New Report #3338748: Approval app allows users to request approval for other users file
🔺Severity: Medium
👽 Reporter: 0x0doteth
⭐️ Reputation: 524
🛠 State: resolved
💼 Team: Nextcloud
💵 Bounty: null
🕐 Submitted: 2025-09-15
⏰ Disclosed: 2025-12-05 08:11:01
📝 Summary: A security vulnerability was discovered in the Approval app that allowed users to request approval for other users' files. The vulnerability was addressed in a security advisory.
📂 Report JSON File: 3338748
@hackeronereports

🎯 New Report #3334165: Nextcloud Tables v1 Share Enumeration Without Authorization (Regression of CVE-2024-52507)
🔺Severity: Low
👽 Reporter: 0x0doteth
⭐️ Reputation: 524
🛠 State: resolved
💼 Team: Nextcloud
💵 Bounty: null
🕐 Submitted: 2025-09-11
⏰ Disclosed: 2025-12-05 08:10:11
📝 Summary: A vulnerability was discovered in Nextcloud Tables v1 that allowed unauthorized users to enumerate shares. The vulnerability was a regression of a previously addressed issue, CVE-2024-52507.
📂 Report JSON File: 3334165
@hackeronereports

🎯 New Report #3357808: Stored XSS Vulnerability via SVG File
🔺Severity: Medium
👽 Reporter: aptroom
⭐️ Reputation: 122
🛠 State: resolved
💼 Team: Nextcloud
💵 Bounty: 150
🕐 Submitted: 2025-09-25
⏰ Disclosed: 2025-12-05 10:33:23
📝 Summary: A stored XSS vulnerability was discovered in Nextcloud related to the handling of SVG files. The vulnerability allowed the execution of arbitrary JavaScript code.
📂 Report JSON File: 3357808
@hackeronereports