Arbitrary POST request as victim user from HTML injection in Jupyter notebooks https://hackerone.com/reports/1409788 Disclosed at: 2022-05-20 14:32:25 UTC+0 Created at: 2021-11-24 23:18:41 UTC+0
Error in Deleting Deck cards attachment reveals the full path of the website https://hackerone.com/reports/1354334 Disclosed at: 2022-05-20 14:04:08 UTC+0 Created at: 2021-09-29 07:58:44 UTC+0
Nextcloud Deck : Possibility for anyone to add a stack with existing tasks on anyone's board https://hackerone.com/reports/1450117 Disclosed at: 2022-05-20 10:37:23 UTC+0 Created at: 2022-01-14 23:58:19 UTC+0
Sensitive files/ data exists post deletion of user account https://hackerone.com/reports/1222873 Disclosed at: 2022-05-20 09:25:31 UTC+0 Created at: 2021-06-10 13:52:54 UTC+0