49 matches found
CVE-2020-10560
CVE-2020-10560 CVE-2020-10560 OSSN 任意ファイル読み取り 詳細については、https://techanarchy.net/blog/cve-2020-10560-ossn-arbitrary-file-read を参照してください。 開始 docker-compose up --build インストール イメージが実行されたら、インストールページに127.0.0.1または10.2.0.101でアクセスできます。 BURPを使用する場合は、127.0.0.1にインストールしないでください。URLのリダイレクトに問題が発生します。...
CVE-2020-10560-Key-Recovery
CVE-2020-10560 密钥恢复 AES 此 PoC 可恢复 OSSN 5.3 及以上版本的 sitekey。 更多信息请参阅 http://techanarchy.net/blog/cve-2020-10560-ossn-arbitrary-file-read。...
CVE-2022-34963
OpenTeknik LLC OSSN 开源社交网络 v6.3 LTS 漏洞说明： OpenTeknik LLC OSSN 开源社交网络 v6.3 LTS 被发现通过 News Feed 模块包含一个存储型跨站脚本（XSS）漏洞。 攻击向量： 攻击者必须在“新闻源”上发布内容，并在位置输入处插入 XSS 载荷，以利用存储型 XSS。提交后，XSS 载荷将立即触发。 受影响范围： http://ipaddress:port/ossn/home POST...
CVE-2022-34962
OpenTeknik LLC OSSN 开源社交网络 v6.3 LTS 漏洞说明： OpenTeknik LLC OSSN 开源社交网络 v6.3 LTS 被发现通过 Group Timeline 模块存在一个存储型跨站脚本 XSS 漏洞。 攻击向量： 攻击者必须在 Group Timeline 上发布内容，并在位置输入中插入XSS载荷以利用存储型XSS。提交后，XSS载荷将立即执行。 受影响： http://ipaddress:port/ossn/group/number POST...
CVE-2022-34961
OpenTeknik LLC OSSN 开源社交网络 v6.3 LTS 漏洞说明： 发现 OpenTeknik LLC OSSN 开源社交网络 v6.3 LTS 在 用户时间线 模块中存在存储型跨站脚本（XSS）漏洞。 攻击向量： 攻击者必须在 用户时间线 上发布内容，并在位置输入处插入 XSS 载荷才能利用该存储型 XSS。提交后 XSS 载荷将立即触发。 受影响组件： http://ipaddress:port/ossn/u/username POST...
CVE-2026-41309
Open Source Social Network OSSN is open-source social networking software developed in PHP. Versions prior to 9.0 are vulnerable to resource exhaustion. An attacker can upload a specially crafted image with extreme pixel dimensions e.g., $10000 \times 10000$ pixels. While the compressed file size...
CVE-2025-63441
Open Source Social Network OSSN 8.6 is vulnerable to Cross Site Scripting XSS via the parameter param at endpoint u/administrator/friends...
EUVD-2022-37864
Malicious code in bioql PyPI...
EUVD-2022-37865
Malicious code in bioql PyPI...
EUVD-2022-37866
Malicious code in bioql PyPI...
EUVD-2022-37863
Malicious code in bioql PyPI...
EUVD-2022-37868
Malicious code in bioql PyPI...
CVE-2022-34964
OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting XSS vulnerability via the SitePages module...
CVE-2022-34963
OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting XSS vulnerability via the News Feed module...
CVE-2022-34962
OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting XSS vulnerability via the Group Timeline module...
CVE-2022-34966
OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an HTML injection vulnerability via the location parameter at http://ipaddress/:port/ossn/home...
RHEL 7 : python-keystoneclient (RHSA-2014:1784)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2014:1784 advisory. Python-keystoneclient is a client library and a command line utility for interacting with the OpenStack Identity API. It was found that...
CVE-2022-34966
OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an HTML injection vulnerability via the location parameter at http://ipaddress/:port/ossn/home...
Design/Logic Flaw
OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an HTML injection vulnerability via the location parameter at http://ipaddress/:port/ossn/home...
CVE-2022-34966
Open Source Social Network (OSSN) v6.3 LTS contains an HTML injection漏洞 exposed via the location parameter at /ossn/home. The issue is documented across multiple sources as an HTML injection/vector that could lead to client-side impacts; no explicit exploitation details or patch/version fixes are...