Tiny Tiny Rss

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. It does not validate all URLs before requesting them.CVE-2020-25787Tt-Rss · 18% likely

   CWE-20

2. A SQL injection in classes/handler/public.php in the forgotpass component of Tiny Tiny RSS 17.4 exists via the login parameter.CVE-2017-16896Tt-Rss · 1.5% likely

   CWE-89

3. An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. imgproxy in plugins/af_proxy_http/init.php mishandles $_REQUEST["url"] in an error message.CVE-2020-25788Tt-Rss · 1.2% likely

   CWE-829

4. The auth_internal plugin in Tiny Tiny RSS (aka tt-rss) before 2021-03-12 allows an attacker to log in via the OTP code without a valid password. NOTE: this issue only affected the…CVE-2021-28373Tt-Rss · 0.9% likely

   CWE-863

5. Tiny Tiny RSS before 829d478f is vulnerable to XSS window.opener attackCVE-2017-1000035Tt-Rss · 0.9% likely

   CWE-79

6. An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. The cached_url feature mishandles JavaScript inside an SVG document.CVE-2020-25789Tt-Rss · 0.9% likely

   CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.