CVE-2025-63585

CVE-2025-63585 SQL Injection cieca basata sul tempo in /action/rtcomments/status parametro: timestamp È stata riscontrata una vulnerabilità di SQL injection cieca basata sul tempo nel parametro timestamp dell'endpoint /action/rtcomments/status. Un attaccante autenticato in grado di fornire questo...

CVE-2020-10560

CVE-2020-10560 CVE-2020-10560 OSSN Lettura arbitraria di file Per i dettagli su come usare questo repository, fare riferimento a https://techanarchy.net/blog/cve-2020-10560-ossn-arbitrary-file-read Avvio docker-compose up --build Installazione Una volta che le immagini sono in esecuzione, puoi...

CVE-2018-20555

CVE-2018-20555 Das WordPress-Plugin namens Social Network Tabs, entwickelt von der Firma Design Chemical, gibt zweimal den Twitter accesstoken, accesstokensecret, consumerkey und consumersecret seiner Benutzer preis, was zur Übernahme ihres Twitter-Kontos führt. Dies wird durch die folgenden...

CVE-2022-34961

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS Spiegazione della vulnerabilità: OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS è stato scoperto contenere una vulnerabilità di cross-site scripting XSS memorizzato tramite il modulo Users Timeline. Vettori d'attacco: L'attaccante...

fast-security-scanners

Fast security scanners/checks A small contribution to community : We use all these tools in security assessments and in our vulnerability monitoring service Check your domain for DNS NS takeover Repo docker run --dns=8.8.8.8 -e VULNID=dnsnstakeover -e DOMAIN=site.com whitespots/dnsnstakeover Cach...

CVE-2026-51371

creationtimestamp| type| source ---|---|--- 2026-07-31 05:02:47+00:00| seen| https://bsky.app/profile/hermes71.bsky.social/post/3mrw6gqxai42n 2026-08-01 04:58:43+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3mryoodbpnu2r...

CVE-2026-58479

creationtimestamp| type| source ---|---|--- 2026-07-14 15:56:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqmkz5lbib2g 2026-07-14 16:28:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqmmsjcdhx2r 2026-07-15 04:07:07+00:00| seen|...

CVE-2026-12193

creationtimestamp| type| source ---|---|--- 2026-06-15 00:00:36+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3moby42wvt52y 2026-06-15 00:00:38+00:00| seen| https://infosec.exchange/users/offseq/statuses/116751180370821217 2026-06-15 01:00:26+00:00| seen|...

CVE-2026-27787

Cross-site scripting vulnerability exists in MATCHA SNS 1.3.9 and earlier. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the website using the product...

CVE-2026-27145

creationtimestamp| type| source ---|---|--- 2026-06-03 09:00:04+00:00| seen| Telegram/5i-pTes7Ja8Uhuw9wP6auiAd2fWyZYO3DYvaqIbmREm4 2026-06-03 12:00:59+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mnf2r6hlix2f 2026-06-09 12:00:55+00:00| seen|...

CVE-2026-10179

creationtimestamp| type| source ---|---|--- 2026-05-31 13:23:54+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mn5nyomfww2f 2026-05-31 13:28:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn5obdkwxa2m 2026-05-31 17:02:28+00:00| seen|...

GHSA-3V3M-WC6V-X4X3

creationtimestamp| type| source ---|---|--- 2026-05-04 08:45:23+00:00| seen| https://bsky.app/profile/mfahlandt.bsky.social/post/3mkzbtsjhx52w 2026-05-08 20:47:09+00:00| seen| https://bsky.app/profile/kubonai.bsky.social/post/3mlem23uryx2s 2026-05-13 14:46:52+00:00| seen|...

GCVE-1-2026-0028

creationtimestamp| type| source ---|---|--- 2026-04-29 19:43:54+00:00| seen| https://social.circl.lu/users/cedric/statuses/116489704812221144...

CVE-2026-41309

OSSN versions before 9.0 are vulnerable to resource exhaustion via image processing. An attacker can upload an extremely large image (e.g., 10000×10000), causing the server to allocate substantial memory and CPU during decompression and resizing, leading to DoS. The advisories recommend upgrading...

CVE-2026-41309 Open Source Social Network (OSSN) Vulnerable to Resource Exhaustion via Malicious Image Processing

Open Source Social Network OSSN is open-source social networking software developed in PHP. Versions prior to 9.0 are vulnerable to resource exhaustion. An attacker can upload a specially crafted image with extreme pixel dimensions e.g., $10000 \times 10000$ pixels. While the compressed file size...

Open Source Social Network（OSSN） 资源管理错误漏洞

Open Source Social Network OSSN is a social network engine developed by the OSSN team in Switzerland. Prior to version 9.0 of Open Source Social Network OSSN, there was a resource management vulnerability. This vulnerability stemmed from resource exhaustion, which could allow attackers to upload...

PT-2026-34840

Open Source Social Network OSSN is open-source social networking software developed in PHP. Versions prior to 9.0 are vulnerable to resource exhaustion. An attacker can upload a specially crafted image with extreme pixel dimensions e.g., $10000 times 10000$ pixels. While the compressed file size ...

CERTFR-2026-ACT-016

creationtimestamp| type| source ---|---|--- 2026-04-13 09:31:53+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116396701141864601 2026-04-14 13:28:56+00:00| seen| https://bsky.app/profile/macsouverain.bsky.social/post/3mjhiefzp3q2z 2026-04-15 09:38:44+00:00| seen|...

CVE-2026-3371

creationtimestamp| type| source ---|---|--- 2026-04-11 02:16:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj6rfdrtl62r...

CVE-2026-33703

Chamilo LMS is a learning management system. Prior to 2.0.0-RC.3, an Insecure Direct Object Reference IDOR vulnerability in the /social-network/personal-data/userId endpoint allows any authenticated user to access full personal data and API tokens of arbitrary users by modifying the userId...