CVE-2026-108950

Open Source Social Network OSSN through 10.1 contains a missing authorization vulnerability in ossnalbumpagehandler that allows unauthenticated attackers to download files via album/getphoto and album/getcover. Attackers can enumerate sequential file GUIDs to retrieve friends-only album photos an...

EUVD-2026-97357

Open Source Social Network OSSN through 10.1 contains a missing authorization vulnerability in ossnalbumpagehandler that allows unauthenticated attackers to download files via album/getphoto and album/getcover. Attackers can enumerate sequential file GUIDs to retrieve friends-only album photos an...

CVE-2026-108950 Open Source Social Network (OSSN) through 10.1 Missing Authorization via Album Photo Routes

Open Source Social Network OSSN through 10.1 contains a missing authorization vulnerability in ossnalbumpagehandler that allows unauthenticated attackers to download files via album/getphoto and album/getcover. Attackers can enumerate sequential file GUIDs to retrieve friends-only album photos an...

CVE-2026-108950 Open Source Social Network (OSSN) through 10.1 Missing Authorization via Album Photo Routes

Open Source Social Network OSSN through 10.1 contains a missing authorization vulnerability in ossnalbumpagehandler that allows unauthenticated attackers to download files via album/getphoto and album/getcover. Attackers can enumerate sequential file GUIDs to retrieve friends-only album photos an...

CVE-2026-108950

The Open Source Social Network (OSSN) version through 10.1 is vulnerable to a missing authorization flaw in the ossn_album_page_handler component. This security weakness allows unauthenticated attackers to bypass access controls and download private files, such as friends-only album photos and ot...

CVE-2026-108950: Missing Authorization

Open Source Social Network OSSN through 10.1 contains a missing authorization vulnerability in ossnalbumpagehandler that allows unauthenticated attackers to download files via album/getphoto and album/getcover. Attackers can enumerate sequential file GUIDs to retrieve friends-only album photos an...

CVE-2026-108164

Open Source Social Network OSSN through 10.1 contains an insecure direct object reference vulnerability in components/OssnMessages/ossncom.php that allows authenticated users to read other users' private message attachments. Attackers can request the /messages/attachment/guid route with sequentia...

CVE-2026-108164 Open Source Social Network (OSSN) through 10.1 IDOR via Message Attachment Route

Open Source Social Network OSSN through 10.1 contains an insecure direct object reference vulnerability in components/OssnMessages/ossncom.php that allows authenticated users to read other users' private message attachments. Attackers can request the /messages/attachment/guid route with sequentia...

EUVD-2026-96319

Open Source Social Network OSSN through 10.1 contains an insecure direct object reference vulnerability in components/OssnMessages/ossncom.php that allows authenticated users to read other users' private message attachments. Attackers can request the /messages/attachment/guid route with sequentia...

CVE-2026-108164

Open Source Social Network (OSSN) versions up to and including 10.1 are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability in the components/OssnMessages/ossn_com.php component. This flaw allows authenticated users to bypass sender and recipient verification by requesting the ...

CVE-2026-108164 Open Source Social Network (OSSN) through 10.1 IDOR via Message Attachment Route

Open Source Social Network OSSN through 10.1 contains an insecure direct object reference vulnerability in components/OssnMessages/ossncom.php that allows authenticated users to read other users' private message attachments. Attackers can request the /messages/attachment/guid route with sequentia...

CVE-2026-108164: Authorization Bypass Through User-Controlled Key

Open Source Social Network OSSN through 10.1 contains an insecure direct object reference vulnerability in components/OssnMessages/ossncom.php that allows authenticated users to read other users' private message attachments. Attackers can request the /messages/attachment/guid route with sequentia...

CVE-2026-62873

creationtimestamp| type| source ---|---|--- 2026-08-07 01:01:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msheab5dm32t 2026-08-07 03:00:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/117051990119645465 2026-08-08 06:07:07+00:00| seen|...

CVE-2026-66708

creationtimestamp| type| source ---|---|--- 2026-08-06 21:01:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msgwruxti62t...

CVE-2026-17506

creationtimestamp| type| source ---|---|--- 2026-08-05 20:15:11+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msedquario2n...

CVE-2026-16118

creationtimestamp| type| source ---|---|--- 2026-08-05 12:01:04+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3msdi5cimtx2o 2026-08-12 12:01:25+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3msv3gfjsoq2p...

CVE-2026-18214

creationtimestamp| type| source ---|---|--- 2026-07-31 08:17:11+00:00| seen| https://bsky.app/profile/suriq.io/post/3mrwjcekyhw2z...

CVE-2026-51371

creationtimestamp| type| source ---|---|--- 2026-07-31 05:02:47+00:00| seen| https://bsky.app/profile/hermes71.bsky.social/post/3mrw6gqxai42n 2026-08-01 04:58:43+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3mryoodbpnu2r...

CVE-2026-66397

creationtimestamp| type| source ---|---|--- 2026-07-30 04:54:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrtniawca42i...

CVE-2026-60113

creationtimestamp| type| source ---|---|--- 2026-07-29 16:46:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrsesjzl6h2u 2026-07-29 17:56:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsiqplp2l2g 2026-07-29 20:15:10+00:00| seen|...