🎯 New Report #3434156: Username Validation Bypass
🔺Severity: Medium
👽 Reporter: kassem s94
⭐️ Reputation: 10331
🛠 State: resolved
💼 Team: Revive Adserver
💵 Bounty: null
🕐 Submitted: 2025-11-19
⏰ Disclosed: 2025-11-26 14:18:23
📝 Summary: null
📂 Report JSON File: 3434156
@hackeronereports
🔺Severity: Medium
👽 Reporter: kassem s94
⭐️ Reputation: 10331
🛠 State: resolved
💼 Team: Revive Adserver
💵 Bounty: null
🕐 Submitted: 2025-11-19
⏰ Disclosed: 2025-11-26 14:18:23
📝 Summary: null
📂 Report JSON File: 3434156
@hackeronereports
🎯 New Report #2932960: [my.stripo.email Blind SSRF Vulnerability in Stripo App Export via Missing Endpoints Export Email Message to Zapier](https://hackerone.com/reports/2932960)
🔺Severity: Critical
👽 Reporter: odaysec
⭐️ Reputation: null
🛠 State: resolved
💼 Team: Stripo Inc
💵 Bounty: null
🕐 Submitted: 2025-01-13
⏰ Disclosed: 2025-12-01 08:22:34
📝 Summary: A critical Blind SSRF (Server-Side Request Forgery) vulnerability was identified in the export service of the Stripo app. The vulnerability existed in the endpoint
📂 Report JSON File: 2932960
@hackeronereports
🔺Severity: Critical
👽 Reporter: odaysec
⭐️ Reputation: null
🛠 State: resolved
💼 Team: Stripo Inc
💵 Bounty: null
🕐 Submitted: 2025-01-13
⏰ Disclosed: 2025-12-01 08:22:34
📝 Summary: A critical Blind SSRF (Server-Side Request Forgery) vulnerability was identified in the export service of the Stripo app. The vulnerability existed in the endpoint
/exportservice/v3/exports/WEBHOOK/accounts, where malicious input could be provided in the webhookUrl parameter, triggering SSRF and allowing the server to make unauthorized HTTP requests to attacker-controlled systems.📂 Report JSON File: 2932960
@hackeronereports
🎯 New Report #3417967: Potential SQL Injection when annotating FilteredRelation on PostgreSQL
🔺Severity: High
👽 Reporter: stackered
⭐️ Reputation: 212
🛠 State: resolved
💼 Team: Django
💵 Bounty: null
🕐 Submitted: 2025-11-09
⏰ Disclosed: 2025-12-02 15:28:06
📝 Summary: A potential SQL injection vulnerability was discovered in Django's annotation of FilteredRelation on PostgreSQL. The vulnerability was caused by an incomplete regular expression filter in the FORBIDDEN ALIAS PATTERN. This allowed user input to be interpreted as raw strings, potentially enabling the execution of malicious SQL queries. The vulnerability was reported to the Django security team.
📂 Report JSON File: 3417967
@hackeronereports
🔺Severity: High
👽 Reporter: stackered
⭐️ Reputation: 212
🛠 State: resolved
💼 Team: Django
💵 Bounty: null
🕐 Submitted: 2025-11-09
⏰ Disclosed: 2025-12-02 15:28:06
📝 Summary: A potential SQL injection vulnerability was discovered in Django's annotation of FilteredRelation on PostgreSQL. The vulnerability was caused by an incomplete regular expression filter in the FORBIDDEN ALIAS PATTERN. This allowed user input to be interpreted as raw strings, potentially enabling the execution of malicious SQL queries. The vulnerability was reported to the Django security team.
📂 Report JSON File: 3417967
@hackeronereports
🎯 New Report #2890071: admin audit does not log actions on files in a group folder
🔺Severity: Medium
👽 Reporter: klipz
⭐️ Reputation: 107
🛠 State: resolved
💼 Team: Nextcloud
💵 Bounty: null
🕐 Submitted: 2024-12-09
⏰ Disclosed: 2025-12-05 08:22:06
📝 Summary: The admin audit app in Nextcloud versions prior to 24.0.4 did not log actions on files in a group folder.
📂 Report JSON File: 2890071
@hackeronereports
🔺Severity: Medium
👽 Reporter: klipz
⭐️ Reputation: 107
🛠 State: resolved
💼 Team: Nextcloud
💵 Bounty: null
🕐 Submitted: 2024-12-09
⏰ Disclosed: 2025-12-05 08:22:06
📝 Summary: The admin audit app in Nextcloud versions prior to 24.0.4 did not log actions on files in a group folder.
📂 Report JSON File: 2890071
@hackeronereports
🎯 New Report #3247499: Deck app allowed user with "Can share" permission to modify permissions of other non-owners
🔺Severity: Medium
👽 Reporter: daroo
⭐️ Reputation: 460
🛠 State: resolved
💼 Team: Nextcloud
💵 Bounty: 250
🕐 Submitted: 2025-07-11
⏰ Disclosed: 2025-12-05 08:20:21
📝 Summary: The Deck app in Nextcloud allowed users with "Can share" permission to modify the permissions of other non-owners.
📂 Report JSON File: 3247499
@hackeronereports
🔺Severity: Medium
👽 Reporter: daroo
⭐️ Reputation: 460
🛠 State: resolved
💼 Team: Nextcloud
💵 Bounty: 250
🕐 Submitted: 2025-07-11
⏰ Disclosed: 2025-12-05 08:20:21
📝 Summary: The Deck app in Nextcloud allowed users with "Can share" permission to modify the permissions of other non-owners.
📂 Report JSON File: 3247499
@hackeronereports
🎯 New Report #3275810: Calendar app allowed booking appointments without the generated token
🔺Severity: Low
👽 Reporter: daroo
⭐️ Reputation: 460
🛠 State: resolved
💼 Team: Nextcloud
💵 Bounty: null
🕐 Submitted: 2025-07-29
⏰ Disclosed: 2025-12-05 08:18:39
📝 Summary: The calendar app was found to allow booking appointments without the necessary generated token, which could have led to unauthorized access.
📂 Report JSON File: 3275810
@hackeronereports
🔺Severity: Low
👽 Reporter: daroo
⭐️ Reputation: 460
🛠 State: resolved
💼 Team: Nextcloud
💵 Bounty: null
🕐 Submitted: 2025-07-29
⏰ Disclosed: 2025-12-05 08:18:39
📝 Summary: The calendar app was found to allow booking appointments without the necessary generated token, which could have led to unauthorized access.
📂 Report JSON File: 3275810
@hackeronereports
🎯 New Report #3112033: Calendar attachments of local files are offered to downloaded
🔺Severity: Medium
👽 Reporter: daroo
⭐️ Reputation: 460
🛠 State: resolved
💼 Team: Nextcloud
💵 Bounty: 100
🕐 Submitted: 2025-04-25
⏰ Disclosed: 2025-12-05 08:18:13
📝 Summary: A security vulnerability in calendar attachments of local files was discovered, where users were offered to download the attachments.
📂 Report JSON File: 3112033
@hackeronereports
🔺Severity: Medium
👽 Reporter: daroo
⭐️ Reputation: 460
🛠 State: resolved
💼 Team: Nextcloud
💵 Bounty: 100
🕐 Submitted: 2025-04-25
⏰ Disclosed: 2025-12-05 08:18:13
📝 Summary: A security vulnerability in calendar attachments of local files was discovered, where users were offered to download the attachments.
📂 Report JSON File: 3112033
@hackeronereports
🎯 New Report #3137895: Missing ownership check in Tables app allows moving columns into tables of other users
🔺Severity: Medium
👽 Reporter: daroo
⭐️ Reputation: 460
🛠 State: resolved
💼 Team: Nextcloud
💵 Bounty: 250
🕐 Submitted: 2025-05-10
⏰ Disclosed: 2025-12-05 08:17:45
📝 Summary: The Tables app in the specified software had a vulnerability that allowed moving columns into tables of other users without proper ownership checks.
📂 Report JSON File: 3137895
@hackeronereports
🔺Severity: Medium
👽 Reporter: daroo
⭐️ Reputation: 460
🛠 State: resolved
💼 Team: Nextcloud
💵 Bounty: 250
🕐 Submitted: 2025-05-10
⏰ Disclosed: 2025-12-05 08:17:45
📝 Summary: The Tables app in the specified software had a vulnerability that allowed moving columns into tables of other users without proper ownership checks.
📂 Report JSON File: 3137895
@hackeronereports
🎯 New Report #3138721: Tables app allowed users to view columns metadata information of any table
🔺Severity: Medium
👽 Reporter: daroo
⭐️ Reputation: 460
🛠 State: resolved
💼 Team: Nextcloud
💵 Bounty: 250
🕐 Submitted: 2025-05-11
⏰ Disclosed: 2025-12-05 08:17:22
📝 Summary: The Tables app allowed users to view columns metadata information of any table.
📂 Report JSON File: 3138721
@hackeronereports
🔺Severity: Medium
👽 Reporter: daroo
⭐️ Reputation: 460
🛠 State: resolved
💼 Team: Nextcloud
💵 Bounty: 250
🕐 Submitted: 2025-05-11
⏰ Disclosed: 2025-12-05 08:17:22
📝 Summary: The Tables app allowed users to view columns metadata information of any table.
📂 Report JSON File: 3138721
@hackeronereports
🎯 New Report #3247386: Participants were able to blindly delete poll drafts of other users by ID
🔺Severity: Medium
👽 Reporter: daroo
⭐️ Reputation: 460
🛠 State: resolved
💼 Team: Nextcloud
💵 Bounty: 150
🕐 Submitted: 2025-07-11
⏰ Disclosed: 2025-12-05 08:16:59
📝 Summary: Participants were able to blindly delete poll drafts of other users by ID.
📂 Report JSON File: 3247386
@hackeronereports
🔺Severity: Medium
👽 Reporter: daroo
⭐️ Reputation: 460
🛠 State: resolved
💼 Team: Nextcloud
💵 Bounty: 150
🕐 Submitted: 2025-07-11
⏰ Disclosed: 2025-12-05 08:16:59
📝 Summary: Participants were able to blindly delete poll drafts of other users by ID.
📂 Report JSON File: 3247386
@hackeronereports
🎯 New Report #3338748: Approval app allows users to request approval for other users file
🔺Severity: Medium
👽 Reporter: 0x0doteth
⭐️ Reputation: 524
🛠 State: resolved
💼 Team: Nextcloud
💵 Bounty: null
🕐 Submitted: 2025-09-15
⏰ Disclosed: 2025-12-05 08:11:01
📝 Summary: A security vulnerability was discovered in the Approval app that allowed users to request approval for other users' files. The vulnerability was addressed in a security advisory.
📂 Report JSON File: 3338748
@hackeronereports
🔺Severity: Medium
👽 Reporter: 0x0doteth
⭐️ Reputation: 524
🛠 State: resolved
💼 Team: Nextcloud
💵 Bounty: null
🕐 Submitted: 2025-09-15
⏰ Disclosed: 2025-12-05 08:11:01
📝 Summary: A security vulnerability was discovered in the Approval app that allowed users to request approval for other users' files. The vulnerability was addressed in a security advisory.
📂 Report JSON File: 3338748
@hackeronereports
🎯 New Report #3334165: Nextcloud Tables v1 Share Enumeration Without Authorization (Regression of CVE-2024-52507)
🔺Severity: Low
👽 Reporter: 0x0doteth
⭐️ Reputation: 524
🛠 State: resolved
💼 Team: Nextcloud
💵 Bounty: null
🕐 Submitted: 2025-09-11
⏰ Disclosed: 2025-12-05 08:10:11
📝 Summary: A vulnerability was discovered in Nextcloud Tables v1 that allowed unauthorized users to enumerate shares. The vulnerability was a regression of a previously addressed issue, CVE-2024-52507.
📂 Report JSON File: 3334165
@hackeronereports
🔺Severity: Low
👽 Reporter: 0x0doteth
⭐️ Reputation: 524
🛠 State: resolved
💼 Team: Nextcloud
💵 Bounty: null
🕐 Submitted: 2025-09-11
⏰ Disclosed: 2025-12-05 08:10:11
📝 Summary: A vulnerability was discovered in Nextcloud Tables v1 that allowed unauthorized users to enumerate shares. The vulnerability was a regression of a previously addressed issue, CVE-2024-52507.
📂 Report JSON File: 3334165
@hackeronereports
🎯 New Report #3357808: Stored XSS Vulnerability via SVG File
🔺Severity: Medium
👽 Reporter: aptroom
⭐️ Reputation: 122
🛠 State: resolved
💼 Team: Nextcloud
💵 Bounty: 150
🕐 Submitted: 2025-09-25
⏰ Disclosed: 2025-12-05 10:33:23
📝 Summary: A stored XSS vulnerability was discovered in Nextcloud related to the handling of SVG files. The vulnerability allowed the execution of arbitrary JavaScript code.
📂 Report JSON File: 3357808
@hackeronereports
🔺Severity: Medium
👽 Reporter: aptroom
⭐️ Reputation: 122
🛠 State: resolved
💼 Team: Nextcloud
💵 Bounty: 150
🕐 Submitted: 2025-09-25
⏰ Disclosed: 2025-12-05 10:33:23
📝 Summary: A stored XSS vulnerability was discovered in Nextcloud related to the handling of SVG files. The vulnerability allowed the execution of arbitrary JavaScript code.
📂 Report JSON File: 3357808
@hackeronereports
🎯 New Report #3452015: Unauthenticated GraphQL access by prepending schema to private operations
🔺Severity: Medium
👽 Reporter: pwnie
⭐️ Reputation: 1844
🛠 State: resolved
💼 Team: Enjin
💵 Bounty: null
🕐 Submitted: 2025-12-04
⏰ Disclosed: 2025-12-05 15:10:45
📝 Summary: A security vulnerability was identified in the GraphQL schema of the Enjin Platform. The vulnerability allowed unauthorized access to the GraphQL schema by prepending " schema" to private operations. The vulnerability was discovered and reported by a security researcher. The specific location of the vulnerability within the platform-core repository was identified, and a fix was subsequently implemented to address the issue.
📂 Report JSON File: 3452015
@hackeronereports
🔺Severity: Medium
👽 Reporter: pwnie
⭐️ Reputation: 1844
🛠 State: resolved
💼 Team: Enjin
💵 Bounty: null
🕐 Submitted: 2025-12-04
⏰ Disclosed: 2025-12-05 15:10:45
📝 Summary: A security vulnerability was identified in the GraphQL schema of the Enjin Platform. The vulnerability allowed unauthorized access to the GraphQL schema by prepending " schema" to private operations. The vulnerability was discovered and reported by a security researcher. The specific location of the vulnerability within the platform-core repository was identified, and a fix was subsequently implemented to address the issue.
📂 Report JSON File: 3452015
@hackeronereports
🎯 New Report #3407352: curl built with GnuTLS backend defaults to weak crypto parameters
🔺Severity: None
👽 Reporter: nyymi
⭐️ Reputation: 1257
🛠 State: informative
💼 Team: curl
💵 Bounty: null
🕐 Submitted: 2025-10-31
⏰ Disclosed: 2025-12-08 10:45:24
📝 Summary: null
📂 Report JSON File: 3407352
@hackeronereports
🔺Severity: None
👽 Reporter: nyymi
⭐️ Reputation: 1257
🛠 State: informative
💼 Team: curl
💵 Bounty: null
🕐 Submitted: 2025-10-31
⏰ Disclosed: 2025-12-08 10:45:24
📝 Summary: null
📂 Report JSON File: 3407352
@hackeronereports
🎯 New Report #3455037: Certificate Hostname Validation Bypass via Leading Dot in Hostname
🔺Severity: Medium
👽 Reporter: 4bccc
⭐️ Reputation: 100
🛠 State: informative
💼 Team: curl
💵 Bounty: null
🕐 Submitted: 2025-12-06
⏰ Disclosed: 2025-12-09 23:29:46
📝 Summary: null
📂 Report JSON File: 3455037
@hackeronereports
🔺Severity: Medium
👽 Reporter: 4bccc
⭐️ Reputation: 100
🛠 State: informative
💼 Team: curl
💵 Bounty: null
🕐 Submitted: 2025-12-06
⏰ Disclosed: 2025-12-09 23:29:46
📝 Summary: null
📂 Report JSON File: 3455037
@hackeronereports
🎯 New Report #3316910: Second-Order XSS via javascript protocol in MCP Server Portal Apps leads to ATO
🔺Severity: Low
👽 Reporter: matured kazama
⭐️ Reputation: 2312
🛠 State: resolved
💼 Team: Cloudflare Public Bug Bounty
💵 Bounty: null
🕐 Submitted: 2025-08-27
⏰ Disclosed: 2025-12-16 09:47:20
📝 Summary: The vulnerability in the MCP Server Portal Apps was caused by missing sanitization of the redirect uri parameter, leading to a second-order XSS vulnerability. An attacker could craft a malicious redirect uri containing JavaScript code, obtain a client id for this URI, and reuse it when a victim had an active session on the /authorize endpoint to execute arbitrary JavaScript.
📂 Report JSON File: 3316910
@hackeronereports
🔺Severity: Low
👽 Reporter: matured kazama
⭐️ Reputation: 2312
🛠 State: resolved
💼 Team: Cloudflare Public Bug Bounty
💵 Bounty: null
🕐 Submitted: 2025-08-27
⏰ Disclosed: 2025-12-16 09:47:20
📝 Summary: The vulnerability in the MCP Server Portal Apps was caused by missing sanitization of the redirect uri parameter, leading to a second-order XSS vulnerability. An attacker could craft a malicious redirect uri containing JavaScript code, obtain a client id for this URI, and reuse it when a victim had an active session on the /authorize endpoint to execute arbitrary JavaScript.
📂 Report JSON File: 3316910
@hackeronereports
🎯 New Report #3458235: [RCE Remote Code Execution via React Server Components Vulnerability CVE-2025-55182](https://hackerone.com/reports/3458235)
🔺Severity: Critical
👽 Reporter: kanon4
⭐️ Reputation: 965
🛠 State: resolved
💼 Team: IBM
💵 Bounty: null
🕐 Submitted: 2025-12-09
⏰ Disclosed: 2025-12-18 16:17:43
📝 Summary: null
📂 Report JSON File: 3458235
@hackeronereports
🔺Severity: Critical
👽 Reporter: kanon4
⭐️ Reputation: 965
🛠 State: resolved
💼 Team: IBM
💵 Bounty: null
🕐 Submitted: 2025-12-09
⏰ Disclosed: 2025-12-18 16:17:43
📝 Summary: null
📂 Report JSON File: 3458235
@hackeronereports
🎯 New Report #1068477: RXSS in https://jp.mcafee.com/apps/mdm/jp/3.0 asp/
🔺Severity: Medium
👽 Reporter: lemonoftroy
⭐️ Reputation: 5514
🛠 State: resolved
💼 Team: Trellix
💵 Bounty: null
🕐 Submitted: 2020-12-29
⏰ Disclosed: 2025-12-19 11:04:44
📝 Summary: A cross-site scripting (XSS) vulnerability was discovered in https://jp.mcafee.com/apps/mdm/jp/3.0 asp/. The vulnerability was verified in Chrome 87 and Firefox. The vulnerability allowed execution of arbitrary JavaScript code by injecting it into the website's URL.
📂 Report JSON File: 1068477
@hackeronereports
🔺Severity: Medium
👽 Reporter: lemonoftroy
⭐️ Reputation: 5514
🛠 State: resolved
💼 Team: Trellix
💵 Bounty: null
🕐 Submitted: 2020-12-29
⏰ Disclosed: 2025-12-19 11:04:44
📝 Summary: A cross-site scripting (XSS) vulnerability was discovered in https://jp.mcafee.com/apps/mdm/jp/3.0 asp/. The vulnerability was verified in Chrome 87 and Firefox. The vulnerability allowed execution of arbitrary JavaScript code by injecting it into the website's URL.
📂 Report JSON File: 1068477
@hackeronereports
🎯 New Report #3463949: Missing AES-GCM Authentication Tag Validation and Improper Deprecation Handling
🔺Severity: High
👽 Reporter: sideni
⭐️ Reputation: 100
🛠 State: informative
💼 Team: Node.js
💵 Bounty: null
🕐 Submitted: 2025-12-13
⏰ Disclosed: 2025-12-19 21:03:44
📝 Summary: null
📂 Report JSON File: 3463949
@hackeronereports
🔺Severity: High
👽 Reporter: sideni
⭐️ Reputation: 100
🛠 State: informative
💼 Team: Node.js
💵 Bounty: null
🕐 Submitted: 2025-12-13
⏰ Disclosed: 2025-12-19 21:03:44
📝 Summary: null
📂 Report JSON File: 3463949
@hackeronereports
🎯 New Report #3445890: Link unfurling calls out to arbitrary URLs and the private-network guard misses link-local addresses
🔺Severity: Medium
👽 Reporter: brumbelow
⭐️ Reputation: 323
🛠 State: resolved
💼 Team: Basecamp
💵 Bounty: null
🕐 Submitted: 2025-12-01
⏰ Disclosed: 2025-12-22 17:43:51
📝 Summary: A vulnerability was discovered in the application that allowed authenticated users to supply a URL that the server would fetch for OpenGraph data. The "private network" guard only blocked certain IP ranges, but ignored link-local addresses, enabling server-side requests to be made to those hosts. This could have potentially allowed access to internal resources, such as cloud metadata services, depending on the server's network configuration.
📂 Report JSON File: 3445890
@hackeronereports
🔺Severity: Medium
👽 Reporter: brumbelow
⭐️ Reputation: 323
🛠 State: resolved
💼 Team: Basecamp
💵 Bounty: null
🕐 Submitted: 2025-12-01
⏰ Disclosed: 2025-12-22 17:43:51
📝 Summary: A vulnerability was discovered in the application that allowed authenticated users to supply a URL that the server would fetch for OpenGraph data. The "private network" guard only blocked certain IP ranges, but ignored link-local addresses, enabling server-side requests to be made to those hosts. This could have potentially allowed access to internal resources, such as cloud metadata services, depending on the server's network configuration.
📂 Report JSON File: 3445890
@hackeronereports