Lucene search
+L

2 matches found

Hacker One
Hacker One
added 2017/05/17 12:40 p.m.44 views

Nextcloud: RTLO character allowed in shared files

SUMMARY ------------- Hello, I have notices that you do not properly strip the RTLO right to left override character in the sharing page of the file, thus allowing someone to mask the real extension of a file and if the user downloads, then opens the file something may be executed on his machine...

6.9AI score
SaveExploits0
Hacker One
Hacker One
added 2017/03/03 12:24 p.m.44 views

Open-Xchange: RTLO character in file names

DESCRIPTION ------- Hello, I have noticed that you allow the RTLO Right-To-Left-Override character is not filtered from the names of the files saved to drive, or in the attachement names, thus allowing 2 things : 1. Someone sends a malicious file html or exe or something esle via email that...

0.2AI score
SaveExploits0
Rows per page
Query Builder