+- Dark C0d3rs (https://darkcoders.wiki)
+-- Forum: Exploit Log (https://darkcoders.wiki/Forum-Exploit-Log)
+--- Forum: Research Papers/Vulnerability reports (https://darkcoders.wiki/Forum-Research-Papers-Vulnerability-reports)
+--- Thread: HackerOne Disclosed Reports - 2026-08-23 (/Thread-HackerOne-Disclosed-Reports-2026-08-23)
HackerOne disclosed reports - 2026-08-23 - hashXploiter - 08-24-2026
Medium
resolved
resolved
Path Traversal in Nextcloud Talk Android Exposes User Credentials and Private Data via FileProvider
Bug reported by Michael Liu was disclosed at August 24, 2026, 1:23 am | Path Traversal
A vulnerability in Nextcloud Talk Android allowed an external Android app to write and retrieve config files by pinging an internal endpoint.