CVE-2025-14761

Missing cryptographic key commitment in the AWS SDK for PHP may allow a user with write access to the S3 bucket to introduce a new EDK that decrypts to different plaintext when the encrypted data key is stored in an "instruction file" instead of S3's metadata record. To mitigate this issue, upgra...

EUVD-2025-30811

Malicious code in bioql PyPI...

EUVD-2021-28464

Malicious code in bioql PyPI...

CVE-2024-37306

Computer Vision Annotation Tool CVAT is an interactive video and image annotation tool for computer vision. Starting in version 2.2.0 and prior to version 2.14.3, if an attacker can trick a logged-in CVAT user into visiting a malicious URL, they can initiate a dataset export or a backup from a...

CVE-2021-41437

An HTTP response splitting attack in web application in ASUS RT-AX88U before v3.0.0.4.388.20558 allows an attacker to craft a specific URL that if an authenticated victim visits it, the URL will give access to the cloud storage of the attacker...

CVE-2021-41437

An HTTP response splitting attack in web application in ASUS RT-AX88U before v3.0.0.4.388.20558 allows an attacker to craft a specific URL that if an authenticated victim visits it, the URL will give access to the cloud storage of the attacker...

PT-2022-11403 · Asus · Asus Rt-Ax88U

Name of the Vulnerable Software and Affected Versions: ASUS RT-AX88U versions prior to 3.0.0.4.388.20558 Description: The issue allows an attacker to perform an HTTP response splitting attack, enabling them to craft a specific URL. If an authenticated victim visits this URL, it grants the attacke...

Yuanzi Parenting AliCloud OSS credentials have information leakage vulnerability

Yuanzi Parenting APP is a parenting mobile application for parents of 1 to 6 year old babies, which can be an interactive sharing platform for the exchange of parenting knowledge and experience. Aliyun Object Storage Service OSS is a massive, secure and highly reliable cloud storage service...

Xinhua News Agency Ali Cloud OSS credentials have information leakage vulnerability

Xinhua News Agency Client is the mobile portal and new media flagship of the national news agency, the leader of China's new media national team, the unified entrance of China's party and government client clusters and the comprehensive information service platform. Aliyun Object Storage Service...

Palm Edge AliCloud OSS credentials have information leakage vulnerabilities

Palm Edge APP is a mobile unit association dating activities software. There is an information leakage vulnerability in the Palm Edge AliCloud OSS credentials. The vulnerability is caused by credential leakage due to the use of SDK with accessKeyId and accessKeySecret, endpoint built into the...

Cloud tip high school entrance examination Ali cloud OSS credentials have information leakage vulnerability

Cloudtip Higher Education App is a study software for high school students. There is an information leakage vulnerability in the Aliyun OSS credentials of CloudTip Higher Education. The vulnerability is caused by credential leakage due to the use of SDK with accessKeyId and accessKeySecret,...

Xiaoming probe test Ali cloud OSS credentials have information leakage vulnerability

Xiaoming tan exam app is a learning mobile app application. Xiaoming Tangkao Ali Cloud OSS credentials have an information leakage vulnerability. The vulnerability is caused by credential leakage due to the use of SDK with accessKeyId and accessKeySecret, endpoint built into the mobile app. An...

After School Help AliCloud OSS credentials have information leakage vulnerabilities

After School Help App is an application for elementary and middle school students to communicate after school. An information leakage vulnerability exists in the After School Help AliCloud OSS credentials. The vulnerability is caused by credential leakage due to accessKeyId and accessKeySecret,...

Information Leakage Vulnerability in True Cosmo's AliCloud OSS Credentials

ZhenYuMei APP is a plastic surgery application platform launched by Beijing Oriental Time Technology Co., Ltd, which is a consulting and communication platform integrating cosmetic surgery information, organizations, cases, projects, and surgery discounts. A vulnerability exists in the informatio...

Today's manipulation of the AliCloud OSS credentials have information leakage vulnerability

Today's manipulation is a practical financial management cell phone application, the user through the software can conveniently keep abreast of the precious metals trading market, information, easy financial management, efficient money. AliCloud Object Storage Service Object Storage Service,...

Information leakage vulnerability in Aliyun OSS credentials in Higher Education State

CollegeBang is dedicated to providing online courses, and course production services for colleges and universities around the world. Aliyun Object Storage Service, or OSS for short, is a massive, secure and highly reliable cloud storage service provided by Aliyun. There is an information leakage...

Bean rice ali cloud oss credentials have information leakage vulnerability

Bean Rice APP is a mobile creation chat community software. AliCloud Object Storage Service Object Storage Service, abbreviated as OSS, is a massive, secure and highly reliable cloud storage service provided by AliCloud to the public. AliCloud OSS is a cloud storage service based on AliCloud...

Smartphones cache poses huge risk for Cloud Storage Security

A couple of years ago, the tech world was abuzz about the cloud. Cloud computing refers to computing where the processing or storage takes place on a networked series of computers rather than on the device that you're using. Whether you're using a PC, laptop, tablet, smartphone, television, or...