Technology
Public cloud services and their SDKs/agents (AWS, Azure, Google Cloud). 1,417 published CVES affecting Cloud Platforms, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
Newest publication first · page 32 of 40 · showing the latest 1,000
-= Per source details. Do not edit below this line.=- Source: kam193 (3a20fe9fed2445d097ddfd628d59e1b8149913aec4915c112cacfa9fb7cdfc6e) This campaign is built from two parts: packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date"...
-= Per source details. Do not edit below this line.=- Source: kam193 (221affa8a84428ae21f288ce299d114742d269e7bbcbf223a0aa666327fae2c4) This campaign is built from two parts: packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date"...
-= Per source details. Do not edit below this line.=- Source: kam193 (6c6598ac9c321af3b0526ddceb5ffc6e78d593e0c3e6bdd259b06c0792705cc6) This campaign is built from two parts: packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date"...
-= Per source details. Do not edit below this line.=- Source: kam193 (4900ca27e14ecb6f022a740bd420fa046084355344379dd21a2b59c53d1c95f1) This campaign is built from two parts: packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date"...
-= Per source details. Do not edit below this line.=- Source: kam193 (92ae5fc73fd7cc45d02ba02f6c3b667d155f681ba74262d66421edee5f19d237) This campaign is built from two parts: packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date"...
-= Per source details. Do not edit below this line.=- Source: kam193 (8a160dff2a937ad50482cc2b8c8bcd1b7e7c37aefb584bd26515edfecdd4052f) This campaign is built from two parts: packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date"...
-= Per source details. Do not edit below this line.=- Source: kam193 (95abdeda4b05cb93bb442d77d1b339498503b1fddb72e3579359f39c5952513b) This campaign is built from two parts: packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date"...
-= Per source details. Do not edit below this line.=- Source: kam193 (5f796bcefeb9b8d3af4bde36c54545d77afdcd6b63284ae58b0a6078b0bbb561) This campaign is built from two parts: packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date"...
-= Per source details. Do not edit below this line.=- Source: kam193 (25b39f6b89687636c8f9e90e3c326bcfb64ecbfa2594850247d4d2e9646b9257) This campaign is built from two parts: packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date"...
-= Per source details. Do not edit below this line.=- Source: kam193 (a5da6618a6f04ceb52acd56bc78e318cb7fbffa07ef3acc041729afe52428c44) This campaign is built from two parts: packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date"...
-= Per source details. Do not edit below this line.=- Source: kam193 (601415ac1e4afe43331c4b78d99e406f34b4a970a365a366cdc0598c5cb22f9c) This campaign is built from two parts: packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date"...
-= Per source details. Do not edit below this line.=- Source: kam193 (7e1b954f34e0b9f14cca18b47f856a049c06e3503f3186ec2ae4db717a1298a8) This campaign is built from two parts: packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date"...
-= Per source details. Do not edit below this line.=- Source: kam193 (61ed09e2fa2143dedd945c585d917ad8d7b55d7118e5093430b48c5c02d126f8) This campaign is built from two parts: packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date"...
-= Per source details. Do not edit below this line.=- Source: kam193 (8062489d0fe9ae58c1937e4afba7f0f3adfbd507e07dd81bb9450bf7f58c6943) This campaign is built from two parts: packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date"...
-= Per source details. Do not edit below this line.=- Source: kam193 (e27bf5713a8bafdbcc34c43b98cc4d5e9c5d03e4952f788b12ff9749081b22d2) This campaign is built from two parts: packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date"...
-= Per source details. Do not edit below this line.=- Source: kam193 (7918a5aab99f521336ce5a17ca3b3dae77256011f91ed8dc22c4d9a38123f539) This campaign is built from two parts: packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date"...
-= Per source details. Do not edit below this line.=- Source: kam193 (59563b61e548ff83488a4940e0511825ebf1a2d0995c83e0056e07fd7a4bd782) This campaign is built from two parts: packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date"...
-= Per source details. Do not edit below this line.=- Source: kam193 (6366aa8c2eff918da0f1cc2118a026e749592f71bebbe81215877575b9593c6a) This campaign is built from two parts: packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date"...
-= Per source details. Do not edit below this line.=- Source: kam193 (89813876cca364b0dffda624005d527aa3c9f54ea7ce20af8186faf8f374ba6f) This campaign is built from two parts: packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date"...
-= Per source details. Do not edit below this line.=- Source: kam193 (23487ce28601ae00fc60455a6e324818c68a8a00b3a3d17f7356853ca7eedee5) This campaign is built from two parts: packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date"...
-= Per source details. Do not edit below this line.=- Source: kam193 (aa9e5d91a1f45bce354edc5b12fcacf603db5e00dc4a48628d3fe5fff37d0eb2) This campaign is built from two parts: packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date"...
oxyno-zeta/s3-proxy is an aws s3 proxy written in go. In affected versions a Reflected Cross-site Scripting (XSS) vulnerability enables attackers to create malicious URLs that, when visited, inject scripts into the web application. This can lead to session hijacking or phishing a...
Hermes versions up to 0.4.0 improperly validated the JWT provided when using the AWS ALB authentication mode, potentially allowing for authentication bypass. This vulnerability, CVE-2025-1293, was fixed in Hermes 0.5.0.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in upcasted AWS S3 for WordPress Plugin – Upcasted upcasted-s3-offload allows Stored XSS.This issue affects AWS S3 for WordPress Plugin – Upcasted: from n/a through <= 3.0.3.
Label Studio is an open source data labeling tool. Prior to version 1.16.0, Label Studio's S3 storage integration feature contains a Server-Side Request Forgery (SSRF) vulnerability in its endpoint configuration. When creating an S3 storage connection, the application allows user...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.