689 matches found
Vendure - Arbitrary File Read
Vendure is an open-source headless commerce platform. Prior to versions 3.0.5 and 2.3.3, a vulnerability in Vendure's asset server plugin allows an attacker to craft a request which is able to traverse the server file system and retrieve the contents of arbitrary files, including sensitive data...
CVE-2026-110108
A flaw was found in MateCloud. Administrative object storage endpoints lack proper access control, allowing any authenticated user to perform restricted storage operations. A remote authenticated user with low privileges can exploit this vulnerability to list stored objects, download files...
SUSE CVE-2025-41118
Pyroscope is an open-source continuous profiling database. The database supports various storage backends, including Tencent Cloud Object Storage COS. If the database is configured to use Tencent COS as the storage backend, an attacker could extract the secretkey configuration value from the...
bucketbuster
BucketBuster Cloud object-storage exposure scanner and read-only storage CLI for authorized security testing, bug bounty work, and infrastructure you own. BucketBuster checks candidate bucket names against public endpoints for Yandex Cloud, VK Cloud, Selectel, SberCloud, Alibaba OSS, Tencent COS,...
oss
oss δΈζ | English A cross-cloud object storage CLI based on the S3 protocol. One binary for all major providers: AWS S3, Aliyun OSS, Tencent COS, Huawei OBS, Baidu BOS, Kingsoft KS3, UCloud US3, JD Cloud OSS, Google Cloud Storage, Cloudflare R2, Scaleway, Wasabi, DigitalOcean Spaces, Yandex,...
Merkle-Tree-Based Verifiable Public Data Auditing for Cloud Object Storage Using Smart Contracts
Owners of data in cloud object storage cannot directly check whether the provider still keeps every object unchanged. Existing research mostly checks blocks inside files or relies on third-party auditors, and less attention has been given to checking each object against a public blockchain...
Aiven Open PGHoard path traversal vulnerability
Versions of Aiven Open PGHoard prior to 2.7.2 contain a path traversal vulnerability. This flaw stems from incomplete path traversal fixes; attackers with write permissions to the backup object storage can exploit path traversal sequences within specially crafted incremental backup lists. They ca...
Benchmarking Post-Quantum Key Encapsulation in S3-Compatible Object Storage under Client Concurrency
Data encrypted today with classical public-key algorithms could be decrypted once large quantum computers exist. Cloud object stores keep data for years, so the client-side encryption that protects it must move to post-quantum algorithms such as ML-KEM, which adds a key-encapsulation step and a...
EnergizeLab station-middleware authorization issue vulnerability
The EnergizeLab station-middleware versions 1.6.5 to 1.8.2 have authorization-related vulnerabilities. This issue arises from the management API not checking user roles, which may allow any authenticated, low-privilege user to obtain AI provider keys and alter configuration settings as well as...
CVE-2026-110108
MateCloud through 5.0.8 contains a missing authorization vulnerability that allows any authenticated user to manage object storage by calling the unprotected /api/v1/admin/storage endpoints in StorageController. Low-privilege or self-registered users can supply arbitrary bucket and objectName...
CVE-2026-110108 MateCloud through 5.0.8 Missing Authorization via /api/v1/admin/storage API
MateCloud through 5.0.8 contains a missing authorization vulnerability that allows any authenticated user to manage object storage by calling the unprotected /api/v1/admin/storage endpoints in StorageController. Low-privilege or self-registered users can supply arbitrary bucket and objectName...
CVE-2026-110108 MateCloud through 5.0.8 Missing Authorization via /api/v1/admin/storage API
MateCloud through 5.0.8 contains a missing authorization vulnerability that allows any authenticated user to manage object storage by calling the unprotected /api/v1/admin/storage endpoints in StorageController. Low-privilege or self-registered users can supply arbitrary bucket and objectName...
EUVD-2026-98941
MateCloud through 5.0.8 contains a missing authorization vulnerability that allows any authenticated user to manage object storage by calling the unprotected /api/v1/admin/storage endpoints in StorageController. Low-privilege or self-registered users can supply arbitrary bucket and objectName...
CVE-2026-110108
MateCloud versions through 5.0.8 are affected by a missing authorization vulnerability within the StorageController . This flaw allows any authenticated user, including low-privilege or self-registered accounts, to interact with unprotected /api/1/admin/storage endpoints. By supplying arbitrary b...
CVE-2026-110108 MateCloud through 5.0.8 Missing Authorization via /api/v1/admin/storage API
MateCloud through 5.0.8 contains a missing authorization vulnerability that allows any authenticated user to manage object storage by calling the unprotected /api/v1/admin/storage endpoints in StorageController. Low-privilege or self-registered users can supply arbitrary bucket and objectName...
CVE-2026-110108: Missing Authorization
MateCloud through 5.0.8 contains a missing authorization vulnerability that allows any authenticated user to manage object storage by calling the unprotected /api/v1/admin/storage endpoints in StorageController. Low-privilege or self-registered users can supply arbitrary bucket and objectName...
PT-2026-111702
MateCloud through 5.0.8 contains a missing authorization vulnerability that allows any authenticated user to manage object storage by calling the unprotected /api/v1/admin/storage endpoints in StorageController. Low-privilege or self-registered users can supply arbitrary bucket and objectName...
Mateaix MateCloud authorization issue vulnerability
Mateaix MateCloud 5.0.8 and earlier versions have an authorization issue vulnerability. This vulnerability stems from the lack of an authorization check. Any authenticated user can manage object storage by calling the unprotected/api/v1/admin/storage endpoint in StorageController. Users with low...
CVE-2026-108654 JeecgBoot through 3.9.5 Missing Authorization via /sys/oss/file/queryById
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the OssFileController queryById handler that allows low-privileged authenticated users to read object storage file records. Attackers who know a record id can request GET /sys/oss/file/queryById to obtain original file name...
CVE-2026-108654 JeecgBoot through 3.9.5 Missing Authorization via /sys/oss/file/queryById
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the OssFileController queryById handler that allows low-privileged authenticated users to read object storage file records. Attackers who know a record id can request GET /sys/oss/file/queryById to obtain original file name...