ownCloud: apps.owncloud.com: Potential XSS

@alaarfaoui reported an issue potentially leading to a XSS vulnerability when an attacker is able to intercept and modify unencrypted HTTP requests. As of request by the reporter this issue has been only disclosed limited. Potential XSS Vulnerability was found. Able to steal the victim's session...

ownCloud: apps.owncloud.com: CSRF change privacy settings

Hello owncloud security team , I am a researcher of security, wanted to reveal a security vulnerability responsibility CSRF , which is found in the website of your website apps.owncloud.com. this bug allow to me to change privacy settings . POC : https://www.youtube.com/watch?v=jDllgJ2wWOA...

ownCloud: Password appears in user name field

step1:Reset password step2:In the pop up--click auto save password step3:Just login to own cloud Step4:You will see your password in the user name field I hope you catch me...

ownCloud: apps.owncloud.com: Mixed Active Scripting Issue

I come across HTTPS security issue - compromises HTTPS security by loading images from non secure source in https://apps.owncloud.com/. Vulnerability Type: Mixed Active Scripting Issue Description: Mixed Active Content is content that has access to and can affect all or parts of the Document Obje...

ownCloud: apps.owncloud.com: Edit Question didn't check ACLs

hello i find bug with it i can edit or delete any question users poc link https://apps.owncloud.com/knowledgebase/editquestion.php?page=89 thanks...

ownCloud: Full Path Disclosure

When I was trying to load a file which is not actually exist then it shows "message":"Could not obtain lock type 1 on "/opt/lampp/htdocs/owncloud/data/admin/files/lol"." Request GET /owncloud/index.php/apps/filestexteditor/ajax/loadfile?filename=lol HTTP/1.1 Host: 192.168.0.105...

ownCloud: Config

Hi, With this bug, a local attacker can infect users with malware. it works this way, after the sign up page or most pages, a Download prompt appears. for example, at your Hackerone Page hackerone.com/owncloud, However, the downloads url, in my case, it was...

Calendar export: Authorization Bypass Through User-Controlled Key - ownCloud

Due to not properly checking the ownership of an calendar, an authenticated attacker is able to download calendars of other users via the "calid" GET parameter to export.php in /apps/calendar/ Affected Software ownCloud Server 8.1.1 CVE-2015-6670 ownCloud Server 8.0.6 CVE-2015-6670 ownCloud Serve...

ownCloud: owncloud.com: Outdated plugins contains public exploits

hey There were many outdated plugins that has may public exploits available , it is strongly suggested to update these . WPML to 3.1.9 sitepress multilingual cms to 3.1.72 google analyticator to 6.9.4.4 Kindly fix these...

Server: Calendar export: Authorization Bypass Through User-Controlled Key

Due to not properly checking the ownership of an calendar, an authenticated attacker is able to download calendars of other users via the "calid" GET parameter to export.php in /apps/calendar/ For more information please consult the official advisory. This advisory is licensed CC BY-SA 4.0...

Server: Information Exposure Through Directory Listing in the file scanner

Due to an incorrect usage of an ownCloud internal file system function the passed path to the file scanner was resolved relatively. An authenticated adversary may thus be able to get a listing of directories but not the containing files existing on the filesystem. However, it is not possible to...

ownCloud: Lack of HSTS on https://apps.owncloud.com

Hi, There is lack of HSTS on you domain https://apps.owncloud.com https://apps.owncloud.com/content/add.php GET /content/add.php HTTP/1.1 Host: apps.owncloud.com User-Agent: Mozilla/5.0 Windows NT 6.1; WOW64; rv:39.0 Gecko/20100101 Firefox/39.0 Accept:...

Information Exposure Through Directory Listing in the file scanner - ownCloud

Due to an incorrect usage of an ownCloud internal file system function the passed path to the file scanner was resolved relatively. An authenticated adversary may thus be able to get a listing of directories but not the containing files existing on the filesystem. However, it is not possible to...

ownCloud: CSRF in apps.owncloud.com

Hello owncloud security team , I am a researcher of security, wanted to reveal a security vulnerability responsibility CSRF , which is found in the website of your website apps.owncloud.com. this bug allow to hackers takeover of user accounts POC : https://www.youtube.com/watch?v=6YnjPoiutfA For...

ownCloud: apps.owncloud.com: Malicious file upload leads to remote code execution

Hello ownCloud Security Team, i am here to report a critical security vulnerability . Proof of concept : https://apps.owncloud.com/CONTENT/content-pre1/171172-1.php5 code source of uploaded file :...

ownCloud: apps.owncloud.com: Stored XSS in profile page

Hi Owncloud, I've found A XSS vulnerability on apps.owncloud.com When I add a comment to add any comment field,My profile page shows my latest comment When I add a comment starts with " the page show this comment so XSS alert occurs in profile page. Even if a victim is not...

ownCloud: demo.owncloud.org: HTTP compression is enabled potentially leading to BREACH attack

@pareshparmar reported the BREACH vulnerability on demo.owncloud.org. ownCloud has meanwhile disabled compression on the system. It should be noted that starting with ownCloud 8.2 the CSRF token is randomized for each request. As per request by the reporter this issue has only been disclosed...

ownCloud: daily.owncloud.com: Information disclosure

https://daily.owncloud.com/enterprise-stable8/enterprise/apps/ I have found a readme.md files also i think this is leaking more information...

ownCloud: *.owncloud.com / *.owncloud.org: Using not strong enough SSL ciphers

We have received multiple reports that some of our domains on .owncloud.com and .owncloud.org are not using a recommended configuration for HTTPS purposes. To avoid having multiple issues to track SSL / TLS related problems on .owncloud.com and .owncloud.org we have merged multiple issues togethe...

ownCloud: test1.owncloud.com: Web Server HTTP Trace/Track Method Support Cross-Site Tracing Vulnerability

DOMAIN: test1.owncloud.com PORT: 443 THREAT: The Web server was detected that supports the HTTP TRACE method. This method allows debugging and connection trace analysis for connections from the client to the Web server. Per the HTTP specification, when this method is used, the Web server echoes...