35 matches found
CVE-2026-27145
creationtimestamp| type| source ---|---|--- 2026-06-03 09:00:04+00:00| seen| Telegram/5i-pTes7Ja8Uhuw9wP6auiAd2fWyZYO3DYvaqIbmREm4 2026-06-03 12:00:59+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mnf2r6hlix2f 2026-06-09 12:00:55+00:00| seen|...
GCVE-1-2026-0028
creationtimestamp| type| source ---|---|--- 2026-04-29 19:43:54+00:00| seen| https://social.circl.lu/users/cedric/statuses/116489704812221144...
PT-2026-34840
Open Source Social Network OSSN is open-source social networking software developed in PHP. Versions prior to 9.0 are vulnerable to resource exhaustion. An attacker can upload a specially crafted image with extreme pixel dimensions e.g., $10000 times 10000$ pixels. While the compressed file size ...
CVE-2015-20121
creationtimestamp| type| source ---|---|--- 2026-03-19 06:00:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhfd62svx723...
CVE-2026-28338
creationtimestamp| type| source ---|---|--- 2026-02-27 12:50:43+00:00| published-proof-of-concept| https://github.com/pmd/pmd/security/advisories/GHSA-8rr6-2qw5-pc7r 2026-02-27 23:18:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfuttvuhhk2u 2026-02-28 04:10:10+00:00| seen|...
CVE-2025-36015
creationtimestamp| type| source ---|---|--- 2025-12-08 23:59:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7jaekmqof2n...
CVE-2025-13448
creationtimestamp| type| source ---|---|--- 2025-12-03 04:50:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m72nthwsjg2k 2025-12-03 08:02:39+00:00| seen| https://gist.github.com/Darkcrai86/23ed300637f70f2b9590a427149092b6...
CVE-2025-63441
Open Source Social Network OSSN 8.6 is vulnerable to Cross Site Scripting XSS via the parameter param at endpoint u/administrator/friends...
PT-2025-44784
Name of the Vulnerable Software and Affected Versions Open Source Social Network OSSN version 8.6 Description Open Source Social Network OSSN version 8.6 is susceptible to a Cross Site Scripting XSS issue. The issue occurs through the param parameter at the /u/administrator/friends API endpoint...
CVE-2025-63441
CVE-2025-63441 affects Open Source Social Network (OSSN) 8.6. The connected documents identify a Cross-Site Scripting (XSS) vulnerability exploitable via the parameter named param at the endpoint /u/administrator/friends. The CVSS v3.1 vector indicates Network attack, Low attack complexity, Low p...
EUVD-2020-3012
Malware in sbrugna...
EUVD-2022-52761
Malicious code in bioql PyPI...
EUVD-2023-46897
Malicious code in bioql PyPI...
EUVD-2022-37867
Malicious code in bioql PyPI...
EUVD-2024-21275
Malicious code in bioql PyPI...
EUVD-2021-30717
Malicious code in bioql PyPI...
CVE-2023-42451
Mastodon is a free, open-source social network server based on ActivityPub. Prior to versions 3.5.14, 4.0.10, 4.1.8, and 4.2.0-rc2, under certain circumstances, attackers can exploit a flaw in domain name normalization to spoof domains they do not own. Versions 3.5.14, 4.0.10, 4.1.8, and 4.2.0-rc...
CVE-2023-36461
Mastodon is a free, open-source social network server based on ActivityPub. When performing outgoing HTTP queries, Mastodon sets a timeout on individual read operations. Prior to versions 3.5.9, 4.0.5, and 4.1.3, a malicious server can indefinitely extend the duration of the response through...
CVE-2022-34965
OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an arbitrary file upload vulnerability via the component /ossn/administrator/cominstaller. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. Note: The project owner believes this ...
CVE-2024-23832 Mastodon Remote user impersonation and takeover
Mastodon is a free, open-source social network server based on ActivityPub Mastodon allows configuration of LDAP for authentication. Due to insufficient origin validation in all Mastodon, attackers can impersonate and take over any remote account. Every Mastodon version prior to 3.5.17 is...