← 返回地图破甲

浏览报告

仅含 CVE

61 份报告 · 本页赏金 $0 · 清除筛选

Unescaped consent-prompt renderer (HTML()) enables concealed-approval OS command injection in strands-agents/tools use_computer — RCE代码执行AWS VDP低危—2026-11-06 Unauthenticated go-httpbin servers : Leads to Cookie Tossing on *.aws.dev and Open Redirect身份认证AWS VDP低危—2026-10-16 RCE in AWS Amplify CLI via Prototype Chain Traversal in amplify-velocity-template代码执行AWS VDP中危—2026-10-13 AWS *.a2z.com | Unauthenticated Clickhouse UI : Database access + SSRF身份认证AWS VDP中危—2026-07-22 Non-Production API Endpoints for the Amazon S3 Tables Service Fails to Log to CloudTrail Resulting in Silent Permission Enumeration信息泄露AWS VDP低危—2026-07-02 Non-Production API Endpoints for the Amazon Cloudwatch Fails to Log to CloudTrail Resulting in Silent Permission Enumeration信息泄露AWS VDP低危—2026-07-27 Firecracker Out-of-bounds Read/Write Local Privilege Escalation Vulnerability内存破坏AWS VDP低危—2026-06-11 bedrock-mantle.api.aws accepts Bedrock API keys outside the IAM Deny, CloudTrail signal, and invocation logging AWS publishes for Bedrock keys错误配置AWS VDP低危—2026-07-14 OS Command Injection in `aws-cdk-lib` NodejsFunction via Unsanitized `OsCommand` Helper (Supply Chain RCE)代码执行AWS VDP中危—2026-07-06 Sandbox User Can Inject Rogue CA Certificate into OS Trust Store via Sudo-Allowed deploy-certificates.sh密码学缺陷AWS VDP低危—2026-07-28 Incomplete Input Sanitization in CodeInterpreter install_packages Allows Command Injection via pip Flags代码执行AWS VDP中危—2026-09-16 Bedrock AgentCore Starter Toolkit Creates Gateway IAM Roles Without Confused Deputy Protections访问控制AWS VDP低危—2026-07-15 Kiro IDE Stores Auth Tokens with World-Readable Permissions (0644)访问控制AWS VDP低危—2026-07-09 Health check errors silently dropped when channel buffer full其他弱点AWS VDP低危—2026-04-07 Encryption context keys and values logged at INFO level信息泄露AWS VDP低危—2026-04-10 V2Plugin.Decrypt panics on empty ciphertext (Remote DoS)内存破坏AWS VDP低危—2026-05-28 V1Plugin.Decrypt panics on empty ciphertext (Remote DoS)内存破坏AWS VDP低危—2026-05-28 SQL Injection Detection Bypass in AWS WAF Managed Rules (AWSManagedRulesSQLiRuleSet)SQL 注入AWS VDP低危—2026-04-15 QuickSight Authorization Bypass: Chat Agents Accessible Despite Custom Permissions Denial访问控制AWS VDP低危—2026-05-12 Command Injection via Unsanitized Bundling Options in `aws-cdk-lib/aws-lambda-nodejs`代码执行AWS VDP中危—2026-06-11 Arbitrary Code Execution via Scanner Bypass in **aws-diagram-mcp-server** `exec()` Namespace代码执行AWS VDP低危—2026-03-09 Password Reuse Vulnerability on AWS Sign-in Page via Password Reset Flow leads to Security Policy Violation身份认证AWS VDP低危—2026-02-26 GitHub Retired UsernameTakeover From [aws/████████]代码执行AWS VDP低危—2026-08-03 Command Injection on Amazon Q Developer CLI via malicious .amazonq/mcp.json leads to arbitrary code execution代码执行AWS VDP低危—2026-01-16 Unlimited Reuse of Coupon Code Allows Free Shipping on All Orders on ██████████业务逻辑AWS VDP低危—2026-02-09