vulns.co
/
GKData.io MCP

HackerOne · 3 min read

Nextcloud

Paid Bounty

Open current program Scope capture

What this record establishes

Scope capture

Published asset rows were captured. The full policy and eligibility were not individually reviewed.

Directory row 421; Active program checkbox checked; Bounties minimum displayed $100. Positive displayed minimum supports paid bounty listing. Policy and live submission availability unverified.

Published asset scope

Snapshot captured 2026-10-03. Scope status: Captured.

In scope · 94 published rows
AssetTypeGroup / eligibility
help.nextcloud.comURLBounty eligible: No
usercontent.apps.nextcloud.comURLBounty eligible: No
projects.nextcloud.comURLBounty eligible: No
lookup.nextcloud.comURLBounty eligible: No
knowledge.nextcloud.comURLBounty eligible: No
surveyserver.nextcloud.comURLBounty eligible: No
static.apps.nextcloud.comURLBounty eligible: No
apps.nextcloud.comURLBounty eligible: No
updates.nextcloud.comURLBounty eligible: No
docs.nextcloud.comURLBounty eligible: No
crm.nextcloud.comURLBounty eligible: No
support.nextcloud.comURLBounty eligible: No
scan.nextcloud.comURLBounty eligible: No
lists.nextcloud.comURLBounty eligible: No
portal.nextcloud.comURLBounty eligible: No
push-notifications.nextcloud.comURLBounty eligible: No
customerupdates.nextcloud.comURLBounty eligible: No
auth.nextcloud.comURLBounty eligible: No
logs.nextcloud.comURLBounty eligible: No
stats.nextcloud.comURLBounty eligible: No
nextcloud.comURLBounty eligible: No
download.nextcloud.comURLBounty eligible: No
pushfeed.nextcloud.comURLBounty eligible: No
newsletter.nextcloud.comURLBounty eligible: No
nextcloud/serverSOURCE_CODEBounty eligible: No
nextcloud/activitySOURCE_CODEBounty eligible: No
nextcloud/files_accesscontrolSOURCE_CODEBounty eligible: No
nextcloud/3rdpartySOURCE_CODEBounty eligible: No
nextcloud/files_pdfviewerSOURCE_CODEBounty eligible: No
nextcloud/files_texteditorSOURCE_CODEBounty eligible: No
nextcloud/firstrunwizardSOURCE_CODEBounty eligible: No
nextcloud/notificationsSOURCE_CODEBounty eligible: No
nextcloud/password_policySOURCE_CODEBounty eligible: No
nextcloud/user_samlSOURCE_CODEBounty eligible: No
nextcloud/files_automatedtaggingSOURCE_CODEBounty eligible: No
nextcloud/files_retentionSOURCE_CODEBounty eligible: No
nextcloud/serverinfoSOURCE_CODEBounty eligible: No
nextcloud/nextcloud_announcementsSOURCE_CODEBounty eligible: No
nextcloud/logreaderSOURCE_CODEBounty eligible: No
nextcloud/survey_clientSOURCE_CODEBounty eligible: No
nextcloud/updaterSOURCE_CODEBounty eligible: No
nextcloud/spreedSOURCE_CODEBounty eligible: No
nextcloud/photosSOURCE_CODEBounty eligible: No
nextcloud/mailSOURCE_CODEBounty eligible: No
nextcloud/files_rightclickSOURCE_CODEBounty eligible: No
nextcloud/privacySOURCE_CODEBounty eligible: No
nextcloud/recommendationsSOURCE_CODEBounty eligible: No
nextcloud/viewerSOURCE_CODEBounty eligible: No
nextcloud/textSOURCE_CODEBounty eligible: No
nextcloud/circlesSOURCE_CODEBounty eligible: No
nextcloud/data_requestSOURCE_CODEBounty eligible: No
nextcloud/files_antivirusSOURCE_CODEBounty eligible: No
nextcloud/fulltextsearchSOURCE_CODEBounty eligible: No
nextcloud/flow_notificationsSOURCE_CODEBounty eligible: No
nextcloud/fulltextsearch_elasticsearchSOURCE_CODEBounty eligible: No
nextcloud/files_fulltextsearchSOURCE_CODEBounty eligible: No
nextcloud/groupfoldersSOURCE_CODEBounty eligible: No
nextcloud/guestsSOURCE_CODEBounty eligible: No
nextcloud/sharepointSOURCE_CODEBounty eligible: No
nextcloud/socialsharingSOURCE_CODEBounty eligible: No
nextcloud/suspicious_loginSOURCE_CODEBounty eligible: No
nextcloud/terms_of_serviceSOURCE_CODEBounty eligible: No
nextcloud/twofactor_totpSOURCE_CODEBounty eligible: No
nextcloud/user_oidcSOURCE_CODEBounty eligible: No
nextcloud/workflow_scriptSOURCE_CODEBounty eligible: No
nextcloud/calendarSOURCE_CODEBounty eligible: No
nextcloud/contactsSOURCE_CODEBounty eligible: No
nextcloud/richdocumentsSOURCE_CODEBounty eligible: No
nextcloud/end_to_end_encryptionSOURCE_CODEBounty eligible: No
nextcloud/deckSOURCE_CODEBounty eligible: No
nextcloud/bruteforcesettingsSOURCE_CODEBounty eligible: No
nextcloud/related_resourcesSOURCE_CODEBounty eligible: No
nextcloud/approvalSOURCE_CODEBounty eligible: No
nextcloud/files_lockSOURCE_CODEBounty eligible: No
nextcloud/user_migrationSOURCE_CODEBounty eligible: No
nextcloud/twofactor_webauthnSOURCE_CODEBounty eligible: No
nextcloud/preferred_providersSOURCE_CODEBounty eligible: No
nextcloud/externalSOURCE_CODEBounty eligible: No
nextcloud/notify_pushSOURCE_CODEBounty eligible: No
nextcloud/calendar_resource_managementSOURCE_CODEBounty eligible: No
nextcloud/globalsiteselectorSOURCE_CODEBounty eligible: No
nextcloud/notesSOURCE_CODEBounty eligible: No
https://github.com/roundcube/roundcubemailSOURCE_CODEBounty eligible: No
https://github.com/nextcloud/files_confidentialSOURCE_CODEBounty eligible: No
https://github.com/nextcloud/tablesSOURCE_CODEBounty eligible: No
https://github.com/nextcloud/collectivesSOURCE_CODEBounty eligible: No
nextcloud/files_fulltextsearch_tesseractSOURCE_CODEBounty eligible: No
com.nextcloud.clientGOOGLE_PLAY_APP_IDBounty eligible: No
com.nextcloud.talk2GOOGLE_PLAY_APP_IDBounty eligible: No
it.niedermann.owncloud.notesGOOGLE_PLAY_APP_IDBounty eligible: No
Desktop ClientDOWNLOADABLE_EXECUTABLESBounty eligible: No
com.peterandlinda.iOCNotesAPPLE_STORE_APP_IDBounty eligible: No
it.twsweb.NextcloudAPPLE_STORE_APP_IDBounty eligible: No
com.nextcloud.TalkAPPLE_STORE_APP_IDBounty eligible: No
Out of scope · 8 published rows
AssetTypeGroup / eligibility
drone.nextcloud.comURLBounty eligible: No
conf.nextcloud.comURLBounty eligible: No
cloud.nextcloud.comURLBounty eligible: No
demo.nextcloud.comURLBounty eligible: No
sentry.nextcloud.comURLBounty eligible: No
try.nextcloud.comURLBounty eligible: No
https://nextcloud.atlassian.net/jira/dashboardURLBounty eligible: No
daita/files_fulltextsearch_tesseractSOURCE_CODEBounty eligible: No

Capture limits

  • Only the published asset table was captured; program rules and eligibility still require individual review.

Live policy and platform eligibility still require review.

Sources and collection identity

  1. Official program page Primary source · reviewed 2026-10-03
  2. Published scope source Primary source · reviewed 2026-10-03

Appears in Discovery, Bounty. No identity match is inferred from a shared company name.

GitHub snapshot 2026-10-04

d5550c789111 · JSON exports & schemas · CC BY 4.0 content / MIT software