CVE-2020-23768

An information disclosure vulnerability was discovered in alipayfunction.php in the log file of Alibaba payment interface on PHPPYUN prior to version 5.0.1. If exploited, this vulnerability will allow attackers to obtain users' personally identifiable information including e-mail address and...

CVE-2020-23768

CVE-2020-23768 describes an information-disclosure vulnerability in PHPPYUN before version 5.0.1, rooted in the Alibaba Payment Interface’s alipay_function.php log file. The issue allows an attacker to obtain users’ personal data, including email addresses and phone numbers. Public documentation ...

PHPYUN 信息泄露漏洞

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language jointly maintained by the PHP community. The language is mainly used for Web development, supports a variety of databases and operating systems. An information disclosure vulnerability exists in PHPPYUN...

cloud-init bug fix and enhancement update

The cloud-init packages provide a set of init scripts for cloud instances. Cloud instances need special scripts to run during initialization to retrieve and install SSH keys, and to let the user run various scripts. Bug Fixes and Enhancements: AliyunRHEL8.4cloud-init cloud-init service failed to...

cloud-init bug fix and enhancement update

An update is available for cloud-init. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The cloud-init packages provide a set of init scripts for cloud instances...

Meow Street App Has Denial of Service Vulnerability

Meow Street APP by Alibaba's new consumer shopping tool, is the entity business to build "Internet +" platform. A denial of service vulnerability exists in Meow Street APP. An attacker can exploit the vulnerability to cause the application to crash...

Weak password vulnerability in the oter4 management system

Alibaba B2B company, because of the characteristics of the business, the seller is mainly concentrated in the country, the buyer is mainly concentrated in foreign countries, so derived from Hangzhou and the United States of America, the demand for remote server room, and at the same time in order...

com.alibaba.otter:canal.deployer (>=1.1.7 <=1.1.8), com.alibaba.otter:canal.instance.core (>=1.1.7 <=1.1.8) +90 more potentially affected by CVE-2021-21290 +1 more via org.jboss.netty:netty (>=3.1.0.BETA1 <=3.2.10.Final)

org.jboss.netty:netty MAVEN version =3.1.0.BETA1, =1.1.7, =1.1.7, =1.1.7, =1.1.7, =1.1.7, =1.1.7, =1.1.7, =1.1.7, =1.1.7, =5.0.2, =5.0.2, =5.0.2, =5.0.2, =5.0.2, =5.6.4 and more Source cves: CVE-2021-21290, CVE-2022-24823 Source advisory: OSV:GHSA-5MCR-GQ6C-3HQ2...

Alibaba Canal suffers from information leakage vulnerability

canal is an open source project under Alibaba , pure Java development. Alibaba Canal has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

Canal has an unauthorized access vulnerability

canal is an open source project under Alibaba , pure Java development. canal has an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive information...

Qianniu has a dll hijacking vulnerability

Qianniu is a new one-stop seller management background launched by Alibaba Group in order to make it easier for sellers to take care of their stores after the original seller background system has been integrated and technologically upgraded. There is a dll hijacking vulnerability in Qianniu, whi...

Open redirect in Jupyter Server

Impact What kind of vulnerability is it? Who is impacted? Open redirect vulnerability - a maliciously crafted link to a jupyter server could redirect the browser to a different website. All jupyter servers are technically affected, however, these maliciously crafted links can only be reasonably...

Ali open source project nacos SQL injection vulnerability exists

Nacos is the latest open source project from Alibaba. The Ali open source project nacos suffers from a SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive database information...

Unauthorized Access Vulnerability in Alibaba Druid Monitor

Druid is a JDBC component library , including database connection pools , SQL Parser and other components . An unauthorized access vulnerability exists in Alibaba Druid Monitor, which can be exploited by an attacker to obtain sensitive information...

Undetectable Linux Malware Targeting Docker Servers With Exposed APIs

Cybersecurity researchers today uncovered a completely undetectable Linux malware that exploits undocumented techniques to stay under the radar and targets publicly accessible Docker servers hosted with popular cloud platforms, including AWS, Azure, and Alibaba Cloud. Docker is a popular...

ai.houyi:dorado (>=0.0.1 <=0.0.8), ai.houyi:dorado-core (>=0.0.11 <=0.0.51) +7269 more potentially affected by unknown CVE via com.alibaba:fastjson (>=1.1.15 <=1.2.68)

com.alibaba:fastjson MAVEN version =1.1.15, =0.0.1, =0.0.11, =0.0.16, =0.0.1, =0.0.14, =0.0.47, =0.0.14, =0.1.1, =Finchley.SR2.SR1, =Finchley.SR4, =Finchley.SR2.SR1, =Finchley.SR2.SR1, =Finchley.SR4, =2.0.1.RELEASE, =2.0.1.RELEASE, =2.1.10.RELEASE and more Source cves: unknown CVE Source advisory...

DoubleGun Group Builds Massive Botnet Using Cloud Services

An operation from the China-based cybercrime gang known as DoubleGun Group has been disrupted, which had amassed hundreds of thousands of bots that were controlled via public cloud services, including Alibaba and Baidu Tieba. NetLab 360 researchers, in a recent posting, said that it noticed DNS...

Chinese Researchers Disrupt Malware Attack That Infected Thousands of PCs

Chinese security firm Qihoo 360 Netlab said it partnered with tech giant Baidu to disrupt a malware botnet infecting over hundreds of thousands of systems. The botnet was traced back to a group it calls ShuangQiang also called Double Gun, which has been behind several attacks since 2017 aimed at...

Chinese Researchers Disrupt Malware Attack That Infected Thousands of PCs

Chinese security firm Qihoo 360 Netlab said it partnered with tech giant Baidu to disrupt a malware botnet infecting over hundreds of thousands of systems. The botnet was traced back to a group it calls ShuangQiang also called Double Gun, which has been behind several attacks since 2017 aimed at...

Alibaba Nacos Has Arbitrary File Read Vulnerability

Nacos is Alibaba open source microservice registration and configuration distribution center . Alibaba Nacos has an arbitrary file read vulnerability that can be exploited by an attacker to obtain sensitive information on a website...