586 matches found
fast-security-scanners
Fast security scanners/checks A small contribution to community : We use all these tools in security assessments and in our vulnerability monitoring service Check your domain for DNS NS takeover Repo docker run --dns=8.8.8.8 -e VULNID=dnsnstakeover -e DOMAIN=site.com whitespots/dnsnstakeover Cach...
CVE-2020-10560
CVE-2020-10560 CVE-2020-10560 OSSN任意文件读取 关于如何使用此仓库的详细信息，请参阅 https://techanarchy.net/blog/cve-2020-10560-ossn-arbitrary-file-read 开始 docker-compose up --build 安装 镜像运行后，您可以通过127.0.0.1或10.2.0.101访问安装页面。 如果您想使用BURP，请不要安装在127.0.0.1上，否则URL重定向会出现问题。 在安装页面填写所有详细信息。您可以阅读或编辑compose文件以获取凭据。 DB: ossn usernam...
CVE-2018-20555
CVE-2018-20555 由 Design Chemical 公司开发的 WordPress 插件 Social Network Tabs 两次泄露了其用户的 Twitter accesstoken、accesstokensecret、consumerkey 和 consumersecret，导致其 Twitter 账户被接管。 问题出在显示 Twitter 微件的页面中的以下代码行： jQuerydocument.readyfunction $ var config = widgets: "twitter,facebook,youtube", twitterId: "已编辑",...
CVE-2022-34961
OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS Explicación de la vulnerabilidad: Se descubrió que OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS contiene una vulnerabilidad de cross-site scripting XSS almacenado a través del módulo Users Timeline. Vectores de ataque: El atacante...
CVE-2025-63585
CVE-2025-63585 Inyección SQL ciega basada en tiempo en /action/rtcomments/status parámetro: timestamp Se encontró una vulnerabilidad de inyección SQL ciega basada en tiempo en el parámetro timestamp del endpoint /action/rtcomments/status. Un atacante autenticado que pueda proporcionar este...
CVE-2026-51371
creationtimestamp| type| source ---|---|--- 2026-07-31 05:02:47+00:00| seen| https://bsky.app/profile/hermes71.bsky.social/post/3mrw6gqxai42n 2026-08-01 04:58:43+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3mryoodbpnu2r...
CVE-2026-58479
creationtimestamp| type| source ---|---|--- 2026-07-14 15:56:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqmkz5lbib2g 2026-07-14 16:28:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqmmsjcdhx2r 2026-07-15 04:07:07+00:00| seen|...
CVE-2026-12193
creationtimestamp| type| source ---|---|--- 2026-06-15 00:00:36+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3moby42wvt52y 2026-06-15 00:00:38+00:00| seen| https://infosec.exchange/users/offseq/statuses/116751180370821217 2026-06-15 01:00:26+00:00| seen|...
CVE-2026-27787
Cross-site scripting vulnerability exists in MATCHA SNS 1.3.9 and earlier. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the website using the product...
CVE-2026-27145
creationtimestamp| type| source ---|---|--- 2026-06-03 09:00:04+00:00| seen| Telegram/5i-pTes7Ja8Uhuw9wP6auiAd2fWyZYO3DYvaqIbmREm4 2026-06-03 12:00:59+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mnf2r6hlix2f 2026-06-09 12:00:55+00:00| seen|...
CVE-2026-10179
creationtimestamp| type| source ---|---|--- 2026-05-31 13:23:54+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mn5nyomfww2f 2026-05-31 13:28:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn5obdkwxa2m 2026-05-31 17:02:28+00:00| seen|...
GHSA-3V3M-WC6V-X4X3
creationtimestamp| type| source ---|---|--- 2026-05-04 08:45:23+00:00| seen| https://bsky.app/profile/mfahlandt.bsky.social/post/3mkzbtsjhx52w 2026-05-08 20:47:09+00:00| seen| https://bsky.app/profile/kubonai.bsky.social/post/3mlem23uryx2s 2026-05-13 14:46:52+00:00| seen|...
GCVE-1-2026-0028
creationtimestamp| type| source ---|---|--- 2026-04-29 19:43:54+00:00| seen| https://social.circl.lu/users/cedric/statuses/116489704812221144...
CVE-2026-41309
OSSN versions before 9.0 are vulnerable to resource exhaustion via image processing. An attacker can upload an extremely large image (e.g., 10000×10000), causing the server to allocate substantial memory and CPU during decompression and resizing, leading to DoS. The advisories recommend upgrading...
CVE-2026-41309 Open Source Social Network (OSSN) Vulnerable to Resource Exhaustion via Malicious Image Processing
Open Source Social Network OSSN is open-source social networking software developed in PHP. Versions prior to 9.0 are vulnerable to resource exhaustion. An attacker can upload a specially crafted image with extreme pixel dimensions e.g., $10000 \times 10000$ pixels. While the compressed file size...
PT-2026-34840
Open Source Social Network OSSN is open-source social networking software developed in PHP. Versions prior to 9.0 are vulnerable to resource exhaustion. An attacker can upload a specially crafted image with extreme pixel dimensions e.g., $10000 times 10000$ pixels. While the compressed file size ...
Open Source Social Network（OSSN） 资源管理错误漏洞
Open Source Social Network OSSN is a social network engine developed by the OSSN team in Switzerland. Prior to version 9.0 of Open Source Social Network OSSN, there was a resource management vulnerability. This vulnerability stemmed from resource exhaustion, which could allow attackers to upload...
CVE-2026-41309: Allocation of Resources Without Limits or Throttling
Open Source Social Network OSSN is open-source social networking software developed in PHP. Versions prior to 9.0 are vulnerable to resource exhaustion. An attacker can upload a specially crafted image with extreme pixel dimensions e.g., $10000 \times 10000$ pixels. While the compressed file size...
CERTFR-2026-ACT-016
creationtimestamp| type| source ---|---|--- 2026-04-13 09:31:53+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116396701141864601 2026-04-14 13:28:56+00:00| seen| https://bsky.app/profile/macsouverain.bsky.social/post/3mjhiefzp3q2z 2026-04-15 09:38:44+00:00| seen|...