CVE-2022-34963

OpenTeknik LLC OSSN 开源社交网络 v6.3 LTS 漏洞说明： OpenTeknik LLC OSSN 开源社交网络 v6.3 LTS 被发现通过 News Feed 模块包含一个存储型跨站脚本（XSS）漏洞。 攻击向量： 攻击者必须在“新闻源”上发布内容，并在位置输入处插入 XSS 载荷，以利用存储型 XSS。提交后，XSS 载荷将立即触发。 受影响范围： http://ipaddress:port/ossn/home POST...

CVE-2022-34962

OpenTeknik LLC OSSN 开源社交网络 v6.3 LTS 漏洞说明： OpenTeknik LLC OSSN 开源社交网络 v6.3 LTS 被发现通过 Group Timeline 模块存在一个存储型跨站脚本 XSS 漏洞。 攻击向量： 攻击者必须在 Group Timeline 上发布内容，并在位置输入中插入XSS载荷以利用存储型XSS。提交后，XSS载荷将立即执行。 受影响： http://ipaddress:port/ossn/group/number POST...

EUVD-2022-37864

Malicious code in bioql PyPI...

EUVD-2022-37866

Malicious code in bioql PyPI...

Design/Logic Flaw

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an HTML injection vulnerability via the location parameter at http://ipaddress/:port/ossn/home...

CVE-2022-34966

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an HTML injection vulnerability via the location parameter at http://ipaddress/:port/ossn/home...

CVE-2022-34962

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting XSS vulnerability via the Group Timeline module...

CVE-2022-34962

OpenTeknik OSSN Open Source Social Network v6.3 LTS is affected by a stored XSS in the Group Timeline module. The vulnerability allows malicious input to be stored and rendered, potentially affecting authenticated users. CVE-2022-34962 has a CVSS 3.1 base score of 5.4 (Network attack vector, Low ...

CVE-2022-34962

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting XSS vulnerability via the Group Timeline module...

Cross site scripting

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting XSS vulnerability via the Users Timeline module...

Cross site scripting

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting XSS vulnerability via the News Feed module...

CVE-2022-34964

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting XSS vulnerability via the SitePages module...

CVE-2022-34964

The CVE-2022-34964 entry corresponds to a stored cross-site scripting (XSS) vulnerability in Open Source Social Network (OSSN) v6.3 LTS, exploitable via the SitePages module. Affected component: OSSN SitePages. Root cause: stored XSS, as described across multiple sources. Impact details from the ...

CVE-2022-34964

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting XSS vulnerability via the SitePages module...

CVE-2022-34961

CVE-2022-34961 affects OpenTechnik/Open Source Social Network (OSSN) v6.3 LTS. The vulnerability is a stored XSS in the Users Timeline module. The NVD metrics show CVSS v3.1 base score 5.4 (AV:N, AC:L, PR:L, UI:R, S:C, C:L, I:L, A:N). No exploitation status is provided in the documents. Connected...

CVE-2022-34963

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting XSS vulnerability via the News Feed module...

CVE-2022-34963

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting XSS vulnerability via the News Feed module...

CVE-2022-34965

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an arbitrary file upload vulnerability via the component /ossn/administrator/cominstaller. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. Note: The project owner believes this ...