Loading vulnerability…
In Open Source Social Network (OSSN) through version 5.3, a vulnerability exists where a user-controlled file path, combined with a weak cryptographic random number generator (rand()), allows an attacker to read arbitrary files with the permissions of the webserver. The attacker must brute-force the SiteKey value and use it in a crafted URL targeting components/OssnComments/ossn_com.php or libraries/ossn.lib.upgrade.php to exploit the flaw.
Mallory correlates every CVE against your assets, your vendors, and active adversary campaigns. Know which vulnerabilities matter for you, not just which ones are loud.
What it means. What to do now. Patch path, mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
If you can’t patch tonight, do this now.
Patch, then assume compromise.
2 valid exploits after Mallory filtered fakes, detection scripts, and README-only repos.
This repository provides a proof-of-concept (POC) exploit for CVE-2020-10560, an arbitrary file read vulnerability in Open Source Social Network (OSSN) version 5.2. The repository includes Docker and configuration files to set up a vulnerable OSSN environment, as well as two exploit scripts: 'poc.php' (PHP) and 'poc.py' (Python). Both scripts exploit the improper encryption handling in the OSSN '/comment/staticimage' endpoint, allowing an attacker to read arbitrary files from the server by crafting a specially encrypted and encoded file path using the site key. The exploit requires knowledge of the site key and network access to the OSSN web interface. The repository is structured for easy testing, with Docker Compose files to spin up the vulnerable environment and clear instructions in the README. The main exploit logic is contained in the 'poc.php' and 'poc.py' scripts, which demonstrate how to generate the required payload and retrieve file contents from the target server.
This repository is a Proof-of-Concept (PoC) exploit for CVE-2020-10560, targeting Open Source Social Network (OSSN) version 5.3 and above. The main exploit is implemented in 'crackfish.c', which performs a brute-force attack to recover the AES 'site_key' used by OSSN. The attack works by generating candidate keys based on MD5 hashes of 'ossn' concatenated with integers, cycling the key to the required length, and attempting to decrypt a provided encrypted blob. If the decrypted output contains the string 'tmp/photos', the correct key is assumed to have been found. The repository includes supporting code for base64 encoding/decoding (in the 'base64' directory) and AES cryptography (in the 'tiny-AES-c' directory). The exploit is multi-threaded and reports attempts per second. The main entry point is 'crackfish.c'. No network endpoints are hardcoded; the attack is performed locally on provided data. The exploit is a PoC and does not include weaponized payloads, but demonstrates the feasibility of recovering the cryptographic key, which could be used for further exploitation of OSSN instances vulnerable to CVE-2020-10560.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
Vendor-confirmed product mapping. Mallory continuously reconciles this list against your asset inventory.
No public activity tracked yet. Mallory keeps watching.
No public activity observed for this vulnerability.
Query your assets running an affected version, and investigate the blast radius.
Every observed campaign linking this CVE to a named adversary.
Malware families riding this exploit, with evidence and IOCs.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Cross-references every affected SKU, including bundled OEM variants.
Community discussion across Reddit, Mastodon, and other social sources.