1534 matches found
Malicious Package
Overview middleware-bucket-endpoint is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if thi...
XSS with CSP bypass on WEB instances
📝 Description Drawio WEB instancesn allows https://storage.googleapis.com in CSP script-src, abusing the XSS found in this report, it is possible to bypass the CSP and leak private diagram content. 🕵️♂️ Proof of Concept On the web application side, the javascript execution is protected by the...
TerraformGoat - "Vulnerable By Design" Multi Cloud Deployment Tool
TerraformGoat is selefra research lab's "Vulnerable by Design" multi cloud deployment tool. Currently supported cloud vendors include Alibaba Cloud, Tencent Cloud, Huawei Cloud, Amazon Web Services, Google Cloud Platform, Microsoft Azure. Scenarios ID | Cloud Service Company | Types Of Cloud...
Path Traversal
aws-java-sdk-s3 is vulnerable to path traversal. The vulnerability exists due to the insufficient guard logic used for the download directory in the leavesRoot function of TransferManager.java, allowing an attacker to access files from the S3 bucket that is one level up in the file system by...
[Bypass] Cross-site Scriptin (XSS) via file upload
🔒️ Requirements Privileges: User. 📝 Description I found a bypass to this report by uploading the file with "public": true, parameter. This is due to the fact that AWS bucket public folder does not auto download files when we access them. 🕵️♂️ Proof of Concept Step 1: Go your outline home and...
Partial Path Traversal in com.amazonaws:aws-java-sdk-s3
Overview A partial-path traversal issue exists within the downloadDirectory method in the AWS S3 TransferManager component of the AWS SDK for Java v1. Applications using the SDK control the destinationDirectory argument, but S3 object keys are determined by the application that uploaded the...
PT-2022-20574
Name of the Vulnerable Software and Affected Versions AWS SDK for Java versions prior to 1.12.261 Description A partial-path traversal issue exists within the downloadDirectory method in the AWS S3 TransferManager component of the AWS SDK for Java. This issue allows a knowledgeable actor to bypas...
CVE-2022-22997
Addressed a remote code execution vulnerability by resolving a command injection vulnerability and closing an AWS S3 bucket that potentially allowed an attacker to execute unsigned code on My Cloud Home devices...
CVE-2022-22997
CVE-2022-22997 affects Western Digital My Cloud Home. The issue is a remote code execution via a command injection vulnerability tied to an AWS S3 bucket, which could have allowed unsigned code execution on the device. Mitigation provided in public advisories includes firmware updates (e.g., 8-7-...
Western Digital My Cloud Home command injection vulnerability
Western Digital My Cloud Home is an easy-to-use personal cloud storage device from Western Digital USA. It plugs directly into a Wi-Fi router to protect your digital life. Western Digital My Cloud Home suffers from a command injection vulnerability that stems from an AWS S3 bucket that allows an...
PT-2022-15767
Name of the Vulnerable Software and Affected Versions My Cloud Home devices affected versions not specified Description A remote code execution issue was addressed by resolving a command injection vulnerability and securing an AWS S3 bucket. This vulnerability potentially allowed an attacker to...
CVE-2022-22997: Improper Neutralization of Special Elements used in an OS Command
Addressed a remote code execution vulnerability by resolving a command injection vulnerability and closing an AWS S3 bucket that potentially allowed an attacker to execute unsigned code on My Cloud Home devices...
Western Digital My Cloud Home operating system: Operating system command injection vulnerability
Western Digital My Cloud Home is an easy-to-use personal cloud storage device from Western Digital USA. It plugs directly into a Wi-Fi router to protect your digital life. Western Digital My Cloud Home suffers from an operating system command injection vulnerability that stems from an AWS S3 buck...
Cloud OSINT. Finding Interesting Resources
Locating sensitive information, personally identifiable information PII and questionable assets in the cloud. TL; DR I had a curiosity driven excursion into the public clouds of AWS and Azure to find what is publicly hosted and who by. As anticipated, the results were extremely broad and...
Full Read Server-Side Request Forgery (SSRF)
🔒️ Requirements Privileges: None. 📝 Description The avatarUrl post parameter from /api/users.update and /api/teams.update api endpoint isn't sanitize and permit to get a full read SSRF exploitation. When updating user's or team's avatar, even if from client side we can only change it by uploading...
Virtuozzo Hybrid Infrastructure 5.1 Update 1 (5.1.1-61)
This update provides bug fixes and improvements. Vulnerability id: VSTOR-54473 The network orchestration service does not restart after an update. Vulnerability id: VSTOR-54265 Fixes the root cause of the alert "Cluster had blocked or slow replication." Vulnerability id: VSTOR-54066 Fixes the...
CVE-2022-32558
An issue was discovered in Couchbase Server before 7.0.4. Sample bucket loading may leak internal user passwords during a failure...
CVE-2022-32558
An issue was discovered in Couchbase Server before 7.0.4. Sample bucket loading may leak internal user passwords during a failure...
