CVE-2022-34963

OpenTeknik LLC OSSN 오픈소스 소셜 네트워크 v6.3 LTS 취약점 설명: OpenTeknik LLC OSSN 오픈소스 소셜 네트워크 v6.3 LTS에서 News Feed 모듈을 통해 저장형 크로스 사이트 스크립팅XSS 취약점이 발견되었습니다. 공격 벡터: 공격자는 저장형 XSS를 악용하기 위해 "news feed"에 무언가를 게시하고 위치 입력란에 XSS 페이로드를 삽입해야 합니다. XSS 페이로드는 제출 직후 실행됩니다. 영향을 받는 대상: http://ipaddress:port/ossn/home POST...

CVE-2022-34962

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS 脆弱性の説明: OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS は、Group Timeline モジュールを介して格納型クロスサイトスクリプティング（XSS）脆弱性を含むことが発見されました。 攻撃ベクトル: 攻撃者は、Group Timeline に何かを投稿し、ロケーション入力にXSSペイロードを挿入することで、格納型XSSを悪用する必要があります。XSSペイロードは送信後すぐに実行されます。 影響を受けるも...

EUVD-2022-37864

Malicious code in bioql PyPI...

EUVD-2022-37866

Malicious code in bioql PyPI...

Design/Logic Flaw

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an HTML injection vulnerability via the location parameter at http://ipaddress/:port/ossn/home...

CVE-2022-34966

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an HTML injection vulnerability via the location parameter at http://ipaddress/:port/ossn/home...

CVE-2022-34962

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting XSS vulnerability via the Group Timeline module...

CVE-2022-34962

OpenTeknik OSSN Open Source Social Network v6.3 LTS is affected by a stored XSS in the Group Timeline module. The vulnerability allows malicious input to be stored and rendered, potentially affecting authenticated users. CVE-2022-34962 has a CVSS 3.1 base score of 5.4 (Network attack vector, Low ...

CVE-2022-34962

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting XSS vulnerability via the Group Timeline module...

Cross site scripting

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting XSS vulnerability via the Users Timeline module...

Cross site scripting

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting XSS vulnerability via the News Feed module...

CVE-2022-34964

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting XSS vulnerability via the SitePages module...

CVE-2022-34964

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting XSS vulnerability via the SitePages module...

CVE-2022-34964

The CVE-2022-34964 entry corresponds to a stored cross-site scripting (XSS) vulnerability in Open Source Social Network (OSSN) v6.3 LTS, exploitable via the SitePages module. Affected component: OSSN SitePages. Root cause: stored XSS, as described across multiple sources. Impact details from the ...

CVE-2022-34961

CVE-2022-34961 affects OpenTechnik/Open Source Social Network (OSSN) v6.3 LTS. The vulnerability is a stored XSS in the Users Timeline module. The NVD metrics show CVSS v3.1 base score 5.4 (AV:N, AC:L, PR:L, UI:R, S:C, C:L, I:L, A:N). No exploitation status is provided in the documents. Connected...

CVE-2022-34963

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting XSS vulnerability via the News Feed module...

CVE-2022-34963

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting XSS vulnerability via the News Feed module...

CVE-2022-34965

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an arbitrary file upload vulnerability via the component /ossn/administrator/cominstaller. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. Note: The project owner believes this ...