Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
94
Disclosed reports
613
Subdomains
1,642
Vendor on CyberSIXT
Nextcloud (399 CVEs, 0 exploited)

Most upvoted reports613

All reports
Most upvoted reports of Nextcloud
ReportWeaknessDisclosedBountyVotes
Code injection possible with malformed Nextcloud Talk chat commandsAnalysed#851807Command and Code Injection2020-06-02–317
User can delete data in shared folders he's not autorized to accessAnalysed#642515Access Control2020-04-10–173
Access to all files of remote user through shared fileAnalysed#258084Information Disclosure2020-03-01–154
Attacker can obtain write access to any federated share/public linkAnalysed#1170024Authentication2021-06-10$4,000142
Missing ownership check on remote wipe endpointAnalysed#819807Insecure Direct Object Reference2020-04-19$500141
Remote Code Execution via Extract App PluginAnalysed#546753Command and Code Injection2019-05-30–124
Sensitive Information Disclosure via Back Button Post Logout on https://apps.nextcloud.com/account/#2946927No weakness recorded2025-03-16–113
Mail contact autocomplete bypasses administrator-configured user enumeration restrictions and expose member information outside the intended scope#3617729Information Disclosure2026-09-04$250101
PIN bypass in PassCodeActivity via back button#3625210Authentication2026-06-07$150101
Group restriction bypass via bearer token in user_oidc (SETTING_RESTRICT_LOGIN_TO_GROUPS not enforced in Backend::getCurrentUserId)#3572848Access Control2026-05-21$150100

Subdomains1,642

Subdomains of Nextcloud
NameScopeFirst seen
commarc.ltd.nextcloud.comNot in the scope2026-11-14
concordia.ltd.nextcloud.comNot in the scope2026-11-14
connexia.ltd.nextcloud.comNot in the scope2026-11-14
conocophillips.ltd.nextcloud.comNot in the scope2026-11-14
dacta.ltd.nextcloud.comNot in the scope2026-11-14
dandemutande.ltd.nextcloud.comNot in the scope2026-11-14
dataprotectgroup.ltd.nextcloud.comNot in the scope2026-11-14
demo1.ltd.nextcloud.comtestNot in the scope2026-11-14
demo2.ltd.nextcloud.comtestNot in the scope2026-11-14
demo3.ltd.nextcloud.comtestNot in the scope2026-11-14
design.ltd.nextcloud.comNot in the scope2026-11-14
digi-belgium.ltd.nextcloud.comNot in the scope2026-11-14
direct-ventures.ltd.nextcloud.comNot in the scope2026-11-14
easygcloud.ltd.nextcloud.comNot in the scope2026-11-14
fabien.ltd.nextcloud.comNot in the scope2026-11-14
fgu-aarhus.ltd.nextcloud.comNot in the scope2026-11-14
fit-fraunhofer.ltd.nextcloud.comNot in the scope2026-11-14
fyruz.ltd.nextcloud.comNot in the scope2026-11-14
gironde.ltd.nextcloud.comNot in the scope2026-11-14
girondenumerique.ltd.nextcloud.comNot in the scope2026-11-14
halberstadtwerke.ltd.nextcloud.comNot in the scope2026-11-14
harras.ltd.nextcloud.comNot in the scope2026-11-14
holz-lippe.ltd.nextcloud.comNot in the scope2026-11-14
hs-rm.ltd.nextcloud.comNot in the scope2026-11-14
huawei.ltd.nextcloud.comNot in the scope2026-11-14
hub6.ltd.nextcloud.comNot in the scope2026-11-14
iateiag.ltd.nextcloud.comNot in the scope2026-11-14
iitkanpur.ltd.nextcloud.comNot in the scope2026-11-14
impetus.ltd.nextcloud.comNot in the scope2026-11-14
ioer.ltd.nextcloud.comNot in the scope2026-11-14
ipotential.ltd.nextcloud.comNot in the scope2026-11-14
itz.ltd.nextcloud.comNot in the scope2026-11-14
jenniestuarthealth.ltd.nextcloud.comNot in the scope2026-11-14
kimm.ltd.nextcloud.comNot in the scope2026-11-14
kinda-kommun.ltd.nextcloud.comNot in the scope2026-11-14
ldi-rlp.ltd.nextcloud.comNot in the scope2026-11-14
lindner.ltd.nextcloud.comNot in the scope2026-11-14
lindnergroup.ltd.nextcloud.comNot in the scope2026-11-14
livephotos.ltd.nextcloud.comNot in the scope2026-11-14
lomar.ltd.nextcloud.comNot in the scope2026-11-14
magenta27.ltd.nextcloud.comNot in the scope2026-11-14
maisadour.ltd.nextcloud.comNot in the scope2026-11-14
maquarie.ltd.nextcloud.comNot in the scope2026-11-14
marcelw.ltd.nextcloud.comNot in the scope2026-11-14
mascon.ltd.nextcloud.comNot in the scope2026-11-14
maxime.ltd.nextcloud.comNot in the scope2026-11-14
micromine.ltd.nextcloud.comNot in the scope2026-11-14
moba.ltd.nextcloud.comNot in the scope2026-11-14
moonlight-aviation.ltd.nextcloud.comNot in the scope2026-11-14
msg-group.ltd.nextcloud.comNot in the scope2026-11-14
nc29.ltd.nextcloud.comNot in the scope2026-11-14
neteks.ltd.nextcloud.comNot in the scope2026-11-14
new.ltd.nextcloud.comNot in the scope2026-11-14
nextcloud-experience.ltd.nextcloud.comNot in the scope2026-11-14
nps.ltd.nextcloud.comNot in the scope2026-11-14
oliver.ltd.nextcloud.comNot in the scope2026-11-14
orange.ltd.nextcloud.comNot in the scope2026-11-14
patrick.ltd.nextcloud.comNot in the scope2026-11-14
phrg.ltd.nextcloud.comNot in the scope2026-11-14
ppej.ltd.nextcloud.comNot in the scope2026-11-14
pplus.ltd.nextcloud.comNot in the scope2026-11-14
prefecture.ltd.nextcloud.comNot in the scope2026-11-14
prianto.ltd.nextcloud.comNot in the scope2026-11-14
prise.ltd.nextcloud.comNot in the scope2026-11-14
pro-arbeitskreis-offenbach.ltd.nextcloud.comNot in the scope2026-11-14
promethean.ltd.nextcloud.comNot in the scope2026-11-14
protexxa.ltd.nextcloud.comNot in the scope2026-11-14
regjeringen.ltd.nextcloud.comNot in the scope2026-11-14
rosenberger.ltd.nextcloud.comNot in the scope2026-11-14
sains.ltd.nextcloud.comNot in the scope2026-11-14
sales.ltd.nextcloud.comNot in the scope2026-11-14
sandram.ltd.nextcloud.comNot in the scope2026-11-14
schokolo.ltd.nextcloud.comNot in the scope2026-11-14
sebastian.ltd.nextcloud.comNot in the scope2026-11-14
sfyachtclub.ltd.nextcloud.comNot in the scope2026-11-14
smartsynergy.ltd.nextcloud.comNot in the scope2026-11-14
soroe-kommun.ltd.nextcloud.comNot in the scope2026-11-14
spf67.ltd.nextcloud.comNot in the scope2026-11-14
st-engineering.ltd.nextcloud.comNot in the scope2026-11-14
starboard.ltd.nextcloud.comNot in the scope2026-11-14
stonehage.ltd.nextcloud.comNot in the scope2026-11-14
stormguards.ltd.nextcloud.comNot in the scope2026-11-14
stralsund.ltd.nextcloud.comNot in the scope2026-11-14
telecentro.ltd.nextcloud.comNot in the scope2026-11-14
test.ltd.nextcloud.comtestNot in the scope2026-11-14
test123.ltd.nextcloud.comtestNot in the scope2026-11-14
test2.ltd.nextcloud.comtestNot in the scope2026-11-14
test222.ltd.nextcloud.comtestNot in the scope2026-11-14
test234.ltd.nextcloud.comtestNot in the scope2026-11-14
test3.ltd.nextcloud.comtestNot in the scope2026-11-14
tobi.ltd.nextcloud.comNot in the scope2026-11-14
tobias.ltd.nextcloud.comNot in the scope2026-11-14
toyotaracing.ltd.nextcloud.comNot in the scope2026-11-14
tricore.ltd.nextcloud.comNot in the scope2026-11-14
truecrime.ltd.nextcloud.comNot in the scope2026-11-14
trustpoint.ltd.nextcloud.comNot in the scope2026-11-14
turkcell.ltd.nextcloud.comNot in the scope2026-11-14
u-bordeaux-montaigne.ltd.nextcloud.comNot in the scope2026-11-14
uloog.ltd.nextcloud.comNot in the scope2026-11-14
unverpackt.ltd.nextcloud.comNot in the scope2026-11-14

23 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.

Updated AboutDevelopersSign in