140 matches found
aliyun-cli-3.5.1-2.1 on GA media (moderate)
aliyun-cli-3.5.1-2.1 on GA media Announcement ID: openSUSE-SU-2026:11953-1 Rating: moderate Cross-References: CVE-2026-63209 CVSS scores: CVE-2026-63209 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-63209 SUSE : 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:...
PT-2026-105662
These are all security issues fixed in the aliyun-cli-3.5.1-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11953-1 aliyun-cli-3.5.1-2.1 on GA media
These are all security issues fixed in the aliyun-cli-3.5.1-2.1 package on the GA media of openSUSE Tumbleweed...
Rocky Linux 9.2 [CIQ] Security Update: fence-agents-aliyun / fence-agents-all / fence-agents-amt-ws / etc Multiple Vulnerabilities (ciqsa-2026_0411)
The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260411 advisory. This advisory aggregates security fixes for the fence-agents SRPM in CIQ LTS 9.2. It addresses 2 CVEs: CVE-2024-56201, CVE-2024-56326. Tenable has...
Rocky Linux 8.6 [CIQ] Security Update: fence-agents-aliyun / fence-agents-aliyun-debuginfo / etc (ciqsa-2026_0040)
The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260040 advisory. This advisory aggregates security fixes for the fence-agents SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2024-6345. Tenable has extracted the preceding descripti...
Rocky Linux 9.4 [CIQ] Security Update: fence-agents-aliyun / fence-agents-all / fence-agents-amt-ws / etc Multiple Vulnerabilities (ciqsa-2026_0527)
The Rocky Linux 9.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260527 advisory. This advisory aggregates security fixes for the fence-agents SRPM in CIQ LTS 9.4. It addresses 2 CVEs: CVE-2024-56201, CVE-2024-56326. Tenable has...
CVE-2026-19339: Server-Side Request Forgery (SSRF)
A security flaw has been discovered in aliyun alibabacloud-dataworks-mcp-server up to 1.0.43. The impacted element is the function ReadResourceRequestSchema of the file src/resources/initResources.ts. The manipulation of the argument request.params.uri results in server-side request forgery. The...
Malicious code in luluking3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a95cec14b778c5a61008305c1a4ee8155f777dbe02b6ae5cff25748584105ee On npm install, the package's postinstall hook runs index.js, which reconstructs a URL and shell command from String.fromCharCode char-code arrays...
MAL-2026-12399 Malicious code in luluking3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a95cec14b778c5a61008305c1a4ee8155f777dbe02b6ae5cff25748584105ee On npm install, the package's postinstall hook runs index.js, which reconstructs a URL and shell command from String.fromCharCode char-code arrays...
MAL-2026-12398 Malicious code in luluking2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 495a71c4dcddec545026181c7faeef59cf4c79b4816a148fb88c59c5465e8c97 On npm install, the package's postinstall hook runs index.js, which reconstructs a URL from a char-code array String.fromCharCode.apply on a numeric...
MAL-2026-10759 Malicious code in ryry-cli (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a305ba94c92b6ec62aaf627fc1213d9e37e1645f37fd033f61c7becaba71edd ryry-cli runs as a long-lived agent that connects to a hardcoded WebSocket at wss://api.dalipen.com/aigc/task/connect and executes Python scripts und...
MAL-2026-10038 Malicious code in antsrcsrctest (npm)
The npm package antsrcsrctest masquerades as a "simple date formatting utility" index.js exports a harmless formatDate function that is never referenced by the malicious code but is a credential-harvesting and cloud-metadata-stealing reconnaissance tool. It declares a preinstall: node preinstall....
Malicious code in aliyun-internal-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ad3b492d9e89c081c72b95aba3aa4fd0c436a8f5050c7538e57dec619af2258 The package aliyun-internal-config was found to contain malicious code. Source: ghsa-malware...
MAL-2026-3780 Malicious code in aliyun-internal-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ad3b492d9e89c081c72b95aba3aa4fd0c436a8f5050c7538e57dec619af2258 The package aliyun-internal-config was found to contain malicious code. Source: ghsa-malware...
[SECURITY] Fedora 44 Update: rust-reqsign-aliyun-oss-3.0.0-1.fc44
Aliyun OSS signing implementation for reqsign...
Malicious code in snapshot-date (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 8e86008d35e5f11e68c465940563127cdc9ba1d4b2963f092914bf8e9ce2587b This campaign is built from two parts: 1 packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date" to a remote...
Aliyun Mail: undisclosed vulnerability (ZAI-2026-5XI6CS)
Not disclosed. Details are not yet publicly disclosed...
EUVD-2017-0115
Malware in sbrugna...