66 matches found
EUVD-2026-96319
Open Source Social Network OSSN through 10.1 contains an insecure direct object reference vulnerability in components/OssnMessages/ossncom.php that allows authenticated users to read other users' private message attachments. Attackers can request the /messages/attachment/guid route with sequentia...
CVE-2020-10560-Key-Recovery
CVE-2020-10560 Recupero della chiave AES Questa PoC recupera la sitekey per OSSN 5.3 e versioni successive. Per maggiori informazioni vedere http://techanarchy.net/blog/cve-2020-10560-ossn-arbitrary-file-read...
CVE-2020-10560
CVE-2020-10560 CVE-2020-10560 OSSN Lettura arbitraria di file Per i dettagli su come usare questo repository, fare riferimento a https://techanarchy.net/blog/cve-2020-10560-ossn-arbitrary-file-read Avvio docker-compose up --build Installazione Una volta che le immagini sono in esecuzione, puoi...
CVE-2022-34961
OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS Spiegazione della vulnerabilità: OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS è stato scoperto contenere una vulnerabilità di cross-site scripting XSS memorizzato tramite il modulo Users Timeline. Vettori d'attacco: L'attaccante...
CVE-2025-63441
CVE-2025-63441 Titolo: XSS riflesso tramite arbitrarily supplied URL parameter param all'endpoint u/administrator/friends Sommario: È stata identificata una vulnerabilità di Cross-Site Scripting XSS riflesso nell'endpoint u/administrator/friends dell'applicazione OSSN. Questa vulnerabilità consen...
CVE-2022-34962
OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS Vulnerability Explanation: È stato scoperto che OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS contiene una vulnerabilità di cross-site scripting XSS memorizzato tramite il modulo Group Timeline. Attack Vectors: L'attaccante deve...
CVE-2022-34963
OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS Spiegazione della vulnerabilità: È stata scoperta una vulnerabilità di cross-site scripting XSS memorizzato in OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS tramite il modulo News Feed. Vettori di attacco: Per sfruttare la XSS...
CVE-2026-41309
Open Source Social Network OSSN is open-source social networking software developed in PHP. Versions prior to 9.0 are vulnerable to resource exhaustion. An attacker can upload a specially crafted image with extreme pixel dimensions e.g., $10000 \times 10000$ pixels. While the compressed file size...
CVE-2025-63585: Improper Neutralization of Special Elements used in an SQL Command
OSSN Open Source Social Network 8.6 is vulnerable to SQL Injection in /action/rtcomments/status via the timestamp parameter...
CVE-2025-63441
Open Source Social Network OSSN 8.6 is vulnerable to Cross Site Scripting XSS via the parameter param at endpoint u/administrator/friends...
EUVD-2022-37865
Malicious code in bioql PyPI...
EUVD-2022-37863
Malicious code in bioql PyPI...
EUVD-2022-37866
Malicious code in bioql PyPI...
EUVD-2022-37864
Malicious code in bioql PyPI...
EUVD-2022-37868
Malicious code in bioql PyPI...
CVE-2022-34964
OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting XSS vulnerability via the SitePages module...
CVE-2022-34963
OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting XSS vulnerability via the News Feed module...
CVE-2022-34962
OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting XSS vulnerability via the Group Timeline module...
CVE-2022-34966
OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an HTML injection vulnerability via the location parameter at http://ipaddress/:port/ossn/home...
RHEL 7 : python-keystoneclient (RHSA-2014:1784)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2014:1784 advisory. Python-keystoneclient is a client library and a command line utility for interacting with the OpenStack Identity API. It was found that...