Browse / Nextcloud

Nextcloud

See its reports on the map

Attack surface: 1,639 known subdomains

Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

What gets reported to Nextcloud

• Access Control105
• Information Disclosure104
• Authentication82
• Misconfiguration65
• Cross-site Scripting56
• Other weaknesses26

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Unauthenticated SSRF via Public Reference API -Sharing Token BypassInformativeServer-Side Request Forgery (SSRF)
   41 votes
2. BOLA/IDOR in Out-of-Office API allows any authenticated user to read other users' absence dataInformativeInsecure Direct Object Reference (IDOR) · medium
   40 votes
3. Invisible Salamanders Attack against end_to_end_encryption in NextcloudInformativeUse of a Broken or Risky Cryptographic Algorithm · medium
   38 votes
4. [nextcloud/mail] Blind SSRF to Internal Network via "List-Unsubscribe" SMTP Header when allow_local_remote_servers is allowedInformativeServer-Side Request Forgery (SSRF) · medium
   25 votes
5. Server side request forgery (SSRF) on nextcloud implementation.InformativeServer-Side Request Forgery (SSRF)
   19 votes
6. Predictable Random Number GeneratorInformativeUse of Cryptographically Weak Pseudo-Random Number Generator (PRNG) · medium
   12 votes
7. No Rate Limiting on stats.nextcloud.com loginInformativeViolation of Secure Design Principles
   12 votes
8. The session token in the URLInformativeInformation Disclosure · medium
   11 votes
9. Bruteforcing help.nextcloud.comInformativeImproper Authentication - Generic
   10 votes
10. help.nextcloud Email Address/Username enumerationInformativeInformation Disclosure
    9 votes
11. Password policy changes not enforced for existing passwordsInformativeWeak Cryptography for Passwords · low
    7 votes
12. Unexpected federated shares added via public linkInformativeImproper Access Control - Generic · medium
    7 votes
13. Click Jacking NextcloudInformativeUI Redressing (Clickjacking) · low
    7 votes
14. Email Notification should be get while changing password on apps.nextcloud.comInformativeImproper Authentication - Generic
    7 votes
15. Targeted phishing attacks in Login flow v2InformativePhishing · medium
    6 votes
16. bypassing dashboard without account + Information disclosure trough websockets InformativeImproper Access Control - Generic · high
    6 votes
17. Leaked of Profile Image from URL changingInformativeUncontrolled Resource Consumption
    6 votes
18. Recently change email but still login with old emailInformativeImproper Authentication - Generic · high
    6 votes
19. Passcode Protection in Android Devices Can be Bypassed.InformativeViolation of Secure Design Principles · medium
    6 votes
20. Wordpress Version Disclosure Bug On NextcloudInformativeInformation Disclosure · low
    6 votes
21. Avatar image upload and bypass real image verification InformativeViolation of Secure Design Principles
    6 votes
22. Talk discloses turn server to anybodyInformativeInformation Disclosure · low
    5 votes
23. No set limit to try to login in "https://auth.nextcloud.com/auth/realms/master/protocol/openid-connect/auth" page.InformativeImproper Restriction of Authentication Attempts
    5 votes
24. Vulnerable W3 Total Cache plugin version in use on nextcloud.comInformativeCross-Site Request Forgery (CSRF) · medium
    5 votes
25. Banner Grabbing - Apache Server Version DisclousureInformativeInformation Disclosure
    5 votes
26. RTLO character allowed in shared filesInformativeUI Redressing (Clickjacking) · medium
    5 votes
27. Drone NextcloudInformative
    5 votes
28. HTTP-Basic Authentication on logs.nextcloud.comInformativeViolation of Secure Design Principles
    5 votes
29. Email ID Disclosure.InformativeInformation Disclosure
    5 votes
30. Business/Functional logic bypass: Remove admins from admin group.InformativePrivilege Escalation
    5 votes
31. Vulnerable Javascript libraryInformativeInformation Disclosure
    5 votes
32. Possible RCEInformativeCommand Injection - Generic
    5 votes
33. No admin audit entry for enabling/disabling 2FAInformativeImproper Authentication - Generic · low
    4 votes
34. Full path disclosure vulnerability via Upload .htaccess fileInformativeInformation Disclosure
    4 votes
35. SignUp using Fake EmailInformativeBusiness Logic Errors
    4 votes
36. Banner Grabbing - Apache Server Version DisclosureInformativeInformation Disclosure
    4 votes
37. Information Exposure Through Directory ListingInformativeInformation Exposure Through Directory Listing
    4 votes
38. SSRF at apps.nextcloud.com/developer/apps/releases/newInformativeServer-Side Request Forgery (SSRF)
    4 votes
39. Email SpoofingInformativeViolation of Secure Design Principles
    4 votes
40. REG: Content provider information leakageInformativeCommand Injection - Generic
    4 votes
41. WordPress Vulnerabilities: User Enumeration, Vulnerable Akismet Plugin, XML-RPC Interface availableInformativeInformation Disclosure
    4 votes
42. Information Exposure Through Directory Listing vulnerabilityInformativeInformation Exposure Through Directory Listing · medium
    3 votes
43. No admin audit log for auth tokensInformativeImproper Authentication - Generic · low
    3 votes
44. Default Nextcloud allows http federated sharesInformativemedium
    3 votes
45. Nextcloud update checks leaks informationInformativeInformation Disclosure
    3 votes
46. Federated shares are not password protectedInformativeImproper Authentication - Generic · medium
    3 votes
47. Veracode and security audit record are publicly availableInformativeInsecure Storage of Sensitive Information · low
    3 votes
48. XSS On Nextcloud Integrated with zimbra driveInformativeCross-site Scripting (XSS) - Stored · medium
    3 votes
49. Retrieval and alteration of exposed media on Android Oreo InformativeInformation Disclosure · medium
    3 votes
50. Content (Text) Injection at https://nextcloud.comInformativeViolation of Secure Design Principles · low
    3 votes
51. Login Hints on Admin PanelInformativeViolation of Secure Design Principles · medium
    3 votes
52. The application uses basic authentication.InformativeImproper Authentication - Generic
    3 votes
53. Bruteforce attack is possible on newsletter.nextcloud.comInformativeImproper Authentication - Generic
    3 votes
54. failure to invalidate session on password changeInformativeImproper Authentication - Generic
    3 votes
55. No permission set on Activities [Android App]InformativeImproper Authentication - Generic
    3 votes
56. Trusted server shared secret stored unencrypted in the databaseInformativeImproper Access Control - Generic · low
    2 votes
57. WordPress Plugin Insert or Embed Articulate Content into WordPress Remote Code Execution (UNAUTHORIZED)InformativeInformation Disclosure · low
    2 votes
58. Accessing to download.nextcloud.com from original ip adreess | insecure DownloadInformativeCleartext Transmission of Sensitive Information
    2 votes
59. information discloseInformativeInformation Disclosure
    2 votes
60. Possible SSRF in email server settings(SMTP mode)InformativeServer-Side Request Forgery (SSRF) · medium
    2 votes
61. The email API to test email-server settings is unlimited and can be used as a email bombInformativeImproper Access Control - Generic · medium
    2 votes
62. CSRF token validation is missingInformativeCross-Site Request Forgery (CSRF) · medium
    2 votes
63. Server version/OS type disclosure via HTTP Response HeaderInformativeInformation Disclosure · low
    2 votes
64. Nextcloud.com is vulnerable to SWEET32 attackInformativeCryptographic Issues - Generic
    2 votes
65. BruteForce in to Admin AccountInformativeImproper Authentication - Generic · high
    2 votes
66. Deny access to download.nextcloud.com + foldersInformativeInformation Disclosure
    2 votes
67. Lost Password CSRFInformativeCross-Site Request Forgery (CSRF)
    2 votes
68. Directory Listing On download.nextcloud.com & Practical Attacks on PGP (Pretty Good Privacy) InformativeCryptographic Issues - Generic
    2 votes
69. help.nextcloud.com: Session Management IssueInformativeImproper Authentication - Generic
    2 votes
70. Leaking sensitive information through JSON file path.InformativeInsecure Storage of Sensitive Information · medium
    1 votes
71. Denial of Service when entring an Array in email at seetingsInformativeUncontrolled Resource Consumption · medium
    1 votes
72. Bypass hide download Nextcloud ShareInformativeBusiness Logic Errors · high
    1 votes
73. Cross Site ScriptingInformativeCross-site Scripting (XSS) - Generic
    1 votes
74. Directory Listing In Subdomain Of nextcloud.comInformativeInformation Exposure Through Directory Listing · low
    1 votes
75. Username EnumerationInformativeInformation Disclosure · low
76. Ubuntu 12.04 Privilege EscalationInformativePrivilege Escalation