48 matches found
EUVD-2026-22227
Cleartext Transmission of Sensitive Information vulnerability in Apache APISIX. tencent-cloud-cls log export uses plaintext HTTP This issue affects Apache APISIX: from 2.99.0 through 3.15.0. Users are recommended to upgrade to version 3.16.0, which fixes the issue...
Apache Apisix 安全漏洞
Apache Apisix is a cloud-native microservices API gateway service provided by the Apache Foundation in the United States. This software is implemented based on OpenResty and etcd, featuring dynamic routing and hot loading of plugins. It is suitable for API management within microservice systems...
PT-2026-32603
Cleartext Transmission of Sensitive Information vulnerability in Apache APISIX. tencent-cloud-cls log export uses plaintext HTTP This issue affects Apache APISIX: from 2.99.0 through 3.15.0. Users are recommended to upgrade to version 3.16.0, which fixes the issue...
[SECURITY] Fedora 44 Update: rust-reqsign-tencent-cos-3.0.0-1.fc44
Tencent Cloud COS signing implementation for reqsign...
[SECURITY] Fedora 44 Update: rust-reqsign-0.20.0-1.fc44
Signing HTTP requests for AWS, Azure, Google, Huawei, Aliyun, Tencent and Oracle services...
AnythingLLM security vulnerabilities
AnythingLLM is an integrated AI application developed by Mintplex. Versions of AnythingLLM prior to 1.10.0 contained a security vulnerability. This vulnerability stemmed from the /api/setup-complete endpoint exposing the QdrantApiKey in plain text, which could allow attackers to gain read/write...
CVE-2023-29433
Missing Authorization vulnerability in 腾讯云 tencentcloud-cos allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects tencentcloud-cos: from n/a through 1.0.7...
PT-2026-3780
Name of the Vulnerable Software and Affected Versions Pyroscope versions prior to 1.15.2 Pyroscope versions prior to 1.16.1 Description When configured to use Tencent Cloud Object Storage COS as the storage backend, the Pyroscope API may expose the secret key configuration value. An attacker with...
Exposure of Storage Secret in Pyroscope
Pyroscope is an open-source continuous profiling database. The database supports various storage backends, including Tencent Cloud Object Storage COS. If the database is configured to use Tencent COS as the storage backend, an attacker could extract the secretkey configuration value from the...
[SECURITY] Fedora 41 Update: rust-reqsign-0.18.1-1.fc41
Signing HTTP requests for AWS, Azure, Google, Huawei, Aliyun, Tencent and Oracle services...
[SECURITY] Fedora 42 Update: rust-reqsign-0.18.1-1.fc42
Signing HTTP requests for AWS, Azure, Google, Huawei, Aliyun, Tencent and Oracle services...
[SECURITY] Fedora 43 Update: rust-reqsign-0.18.1-1.fc43
Signing HTTP requests for AWS, Azure, Google, Huawei, Aliyun, Tencent and Oracle services...
[SECURITY] Fedora 43 Update: rust-reqsign-0.18.0-1.fc43
Signing HTTP requests for AWS, Azure, Google, Huawei, Aliyun, Tencent and Oracle services...
[SECURITY] Fedora 42 Update: rust-reqsign-0.18.0-1.fc42
Signing HTTP requests for AWS, Azure, Google, Huawei, Aliyun, Tencent and Oracle services...
[SECURITY] Fedora 41 Update: rust-reqsign-0.18.0-1.fc41
Signing HTTP requests for AWS, Azure, Google, Huawei, Aliyun, Tencent and Oracle services...
EUVD-2023-33002
Malicious code in bioql PyPI...
MAL-2025-34706 Malicious code in tencentcloud-cos-sdk-react-native (npm)
The package tencentcloud-cos-sdk-react-native was found to contain malicious code...
CVE-2023-29433
Missing Authorization vulnerability in 腾讯云 tencentcloud-cos allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects tencentcloud-cos: from n/a through 1.0.7...
CVE-2023-29433 WordPress tencentcloud-cos plugin <= 1.0.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in 腾讯云 tencentcloud-cos allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects tencentcloud-cos: from n/a through 1.0.7...
