Alibaba Cloud OSS Bucket - Public Listing Enabled Detection

Alibaba Cloud Object Storage Service OSS bucket is publicly accessible and allows anonymous listing of objects. This misconfiguration can expose sensitive data, lead to data breaches, and result in unexpected charges on the Alibaba Cloud bill. !/usr/bin/env python3 -- coding: utf-8 -- """Alibaba...

EUVD-2022-7215

Malicious code in bioql PyPI...

Code injection

aliyun-oss-client is a rust client for Alibaba Cloud OSS. Users of this library will be affected, the incoming secret will be disclosed unintentionally. This issue has been patched in version 0.8.1...

CVE-2022-39397 Exposure of sensitive information in aliyun-oss-client

aliyun-oss-client is a rust client for Alibaba Cloud OSS. Users of this library will be affected, the incoming secret will be disclosed unintentionally. This issue has been patched in version 0.8.1...

After School Help AliCloud OSS credentials have information leakage vulnerabilities

After School Help App is an application for elementary and middle school students to communicate after school. An information leakage vulnerability exists in the After School Help AliCloud OSS credentials. The vulnerability is caused by credential leakage due to accessKeyId and accessKeySecret,...