EUVD-2023-53709

Malicious code in bioql PyPI...

NextCloud information leakage vulnerability

Nextcloud is an open source, self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. An information disclosure vulnerability exists in the Nextcloud iOS App that originates from the default Nextcloud Server and iOS Client leaking shared searches to...

PT-2020-9734

Name of the Vulnerable Software and Affected Versions Nextcloud iOS App version 2.23.0 Description The issue is related to a violation of secure design principles, causing the app to leak its login and token to other Nextcloud services. This occurs during specific actions such as searching for...

Nextcloud: Blind Stored XSS on iOS App due to Unsanitized Webview

Hi Team! I found a Blind XSS can executed on iOS App due to unsanitized webview. Using this issue, attacker can extract information from victim. Steps To Reproduce: 1. Upload malicious HTML, share to victim 2. Waiting victim to open it F487447 F487448 HTML payload attached, don't forget to change...