Path Traversal in Nextcloud Talk Android Exposes User Credentials and Private Data via FileProvider
HackerOneNextcloud2026-08-24
Android, Cloud
Medium
BUG BOUNTY WRITEUPS
Android writeups
Android app bugs: exported components, deep links, WebViews, intent redirection and secrets inside APKs.
28 reports and writeups from 2024 to 2026. 13 carry a severity from the disclosing platform, 3 of them rated High or Critical. Last updated 2026-10-30.
Latest Android reports
Search and filter all writeupsmonero:// deeplink parsing accepts tx_amount=(all) and can trigger send-all transaction mode
HackerOneMonero2026-08-20
Android, Web3
Medium
Debug Deep Link Abuse Allows Repeated Forced Logout and Application Disruption
HackerOneYelp2026-08-13
Android
Low
Session Cookie Leakage via Static Header Field in WebViewerFragment
HackerOneLinkedIn2026-03-17
Android
High
uXSS on Samsung Browser [CVE-2025-58485 · SVE-2025-1879]
Researcher blog2026-02-23
Android
Not rated
Can download files on Android app without permission
HackerOneNextcloud2026-01-16$250 bounty
Android, Cloud
Low
Mali-cious Intent: Exploiting GPU Vulnerabilities (CVE-2022-22706 / CVE-2021-39793)
Researcher blog2025-02-02
Android
Not rated
From an Android Hook to RCE: $5000 Bounty
Researcher blog2024-11-19
Android
Not rated
Brave Android: Incorrect URL Eliding in Brave Shields Pop Up
HackerOneBrave Software2024-09-18
Android
Low
MetaMask Browser (on Android) does not enforce Content-Security-Policy header
HackerOneMetaMask2024-08-27
Android
Medium
█████████ (Android): Vulnerable to Javascript Injection and Open redirect
HackerOneU.S. Dept Of Defense2024-07-26
Android
Medium
Path traversal in deeplink query parameter can expose any user's private info to a public directory (one click)
HackerOneBasecamp2024-07-09
Android
Medium
Finding Hidden Threats: How I Found Leaked AWS Credentials in an Android App API Using DAST
Researcher blog2024-06-28
API, Android, Cloud
Not rated
Account Takeover / Arbitrary File read and deletion / Partial code execution (intent redirection)
HackerOneMercadoLibre2024-06-28
Android
High
Account takeover via insecure intent handling
HackerOneBasecamp2024-05-30
Android
Medium
Lynxview JS interfaces Takeover via deeplink traversal
HackerOneTikTok2024-05-24
Android
High
20 Security Issues Found in Xiaomi Devices
Researcher blogXiaomi2024-05-02
Android, Source Code, Binary
Not rated
BlackBerry MDM Has Some Authentication Flaws
GitHubBlackBerry2024-04-22
API, Android
Not rated
Unsecured Content Provider leads to Account Takeover
Medium2024-04-20
Android
Not rated
Element Android CVE-2024-26131, CVE-2024-26132 - Never Take Intents From Strangers
Researcher blogElement2024-04-18
Android
Not rated
Intent Leads To Unauthorised Video Call Initiation Leaking Surrounding Informations Of Victim
HackerOneSnapchat2024-04-05
Android
Medium
How did we find the same vulnerability in 9 Android Apps
Medium2024-03-15
Android
Not rated
Hacking a Smart Home Device
Researcher blog2024-02-03
Android, Binary
Not rated
Hacking into a Toyota/Eicher Motors insurance company by exploiting their premium calculator website
Researcher blogToyota2024-01-17
Android
Not rated
Introducing MavenGate: a supply chain attack method for Java and Android applications
Researcher blogGoogle, Facebook, Amazon2024-01-17
Android, Source Code
Not rated
Android-based PAX POS vulnerabilities (Part 1)
Researcher blogPAX Technology2024-01-15
Android, Source Code
Not rated
How I Helped Indonesian Startup Company to Prevent Millions of PII Data Leaks
Medium2024-01-10$500 bounty
Android
Not rated
Genie Aladdin Connect Retrofit Garage Door Opener: Multiple Vulnerabilities
Researcher blogThe Genie Company (Aladdin Connect)2024-01-03
Android
Not rated
Every entry links to the original report or article. Secure Hyperloop doesn't copy the content. Severity comes from the disclosing platform (HackerOne). Writeups without a platform rating show "Not rated". The index has 2,810 items in total.