Malicious code in testrrrd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91a77cc9dbdff4799414082dc85fc6581b9f2d7297136dea8c50540f7d5244ad On npm install, package.json scripts.postinstall runs node beacon.cjs, which POSTs a JSON payload containing the installer's hostname os.hostname,...

MAL-2026-17704 Malicious code in @wxwxtest/testrrrdd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c288e48135ebe9f305d450f5b19324ae944865fb7057ced986d0eb30cb1fe34 The package ships a postinstall script scripts.postinstall runs node beacon.cjs and a top-level require'./beacon.cjs'.fire in index.js that POST...

Exploit for Path Traversal in Apache Http_Server

Apache HTTP Server 2.4.50 Path Traversal and RCE CVE-2021-420...

CVE-2026-78399

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an authenticated user to cause a denial of service using a specially crafted HTTP query due to improper allocation of system resources...

CVE-2026-78399 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an authenticated user to cause a denial of service using a specially crafted HTTP query due to improper allocation of system resources...

CVE-2026-78399

IBM Security Verify Access (versions 10.0 through 10.0.9.2) and IBM Verify Identity Access (versions 11.0 through 11.0.3) are vulnerable to a Denial of Service (DoS) attack. An authenticated user can trigger the DoS by sending a specially crafted HTTP query , which leads to an improper allocation...

EUVD-2026-95272

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an authenticated user to cause a denial of service using a specially crafted HTTP query due to improper allocation of system resources...

CVE-2026-78399 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an authenticated user to cause a denial of service using a specially crafted HTTP query due to improper allocation of system resources...

Exploit for Deserialization of Untrusted Data in Redhat Jboss_Enterprise_Application_Platform

JBoss Deserialization RCE CVE-2017-12149 Vulhubhttps://v...

curl: HTTP/1.1 connection reuse returns unsolicited server data as the next request's response (regression in 8.22.0)

Since 8.22.0 libcurl reuses an idle HTTP/1.1 connection that already has unread bytes waiting on it, as long as the pool health check ran less than a second ago, and those bytes are then returned as the response to the next request sent on that connection, so every later response on it is shifted...

Exploit for Unrestricted Upload of File with Dangerous Type in Apache Tomcat

Tomcat PUT Arbitrary File Write CVE-2017-12615 Vulhubhtt...

RHLW-2026-37913C8C5F4BDEA1 Lightwell Security Advisory: jetty-ee10-demo-async-rest-jar 12.0.32.rhlw-00002

Red Hat Lightwell has released org.eclipse.jetty.ee10.demos:jetty-ee10-demo-async-rest-jar 12.0.32.rhlw-00002 with a backported security fix. CVE-2026-2332: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing This patched artifact is a drop-in replacement for...

Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale native REST API are now fixed in 5.2.3.10 or higher and 6.0.1.2 or higher

Summary The following vulnerabilities that can affect IBM Storage Scale native REST API are now fixed in 5.2.3.10 or higher and 6.0.1.2 or higher Vulnerability Details ID:WS-2026-0025 DESCRIPTION: Multiple security vulnerabilities have been identified and addressed in grpc-go affecting the xDS RB...

CVE-2026-107294

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.2 and 2.24.0, webfetchtool, the WebFetch local fallback, and remote FileUrl media downloads buffer the complete HTTP response body before enforcing content-size controls. An...

ai.taskmonk:taskmonk-sdk (>=1.7, <=1.16.6), app.peac:core (0.0.1) +2426 more potentially affected by CVE-2024-53990 +1 more via org.asynchttpclient:async-http-client (>=2.1.0, <=2.16.1)

org.asynchttpclient:async-http-client MAVEN version =2.1.0, =1.7, =4.1.0, =4.0.0-beta.2, =0.7.0, =0.7.0, =0.1.0, =0.2.0, =0.7.0, =0.7.0, =0.1.0, =0.2.0, =0.9.2 and more Source cves: CVE-2024-53990, CVE-2026-107228 Source advisory: GHSA-2JWH-9RMR-J4XF...

ai.taskmonk:taskmonk-sdk (>=1.7, <=1.16.6), app.peac:core (0.0.1) +2426 more potentially affected by CVE-2024-53990 +1 more via org.asynchttpclient:async-http-client (>=2.1.0, <=2.16.1)

org.asynchttpclient:async-http-client MAVEN version =2.1.0, =1.7, =4.1.0, =4.0.0-beta.2, =0.7.0, =0.7.0, =0.1.0, =0.2.0, =0.7.0, =0.7.0, =0.1.0, =0.2.0, =0.9.2 and more Source cves: CVE-2024-53990, CVE-2026-107228 Source advisory: OSV:GHSA-2JWH-9RMR-J4XF...

com.akamai.edgegrid:edgegrid-signer-async-http-client (>=6.0.1-rc.1, <=6.0.5), com.arpnetworking.metrics:mad-experimental (>=1.2.3, <=1.2.11) +93 more potentially affected by CVE-2024-53990 +1 more via org.asynchttpclient:async-http-client (>=3.0.0, <=3.0.13)

org.asynchttpclient:async-http-client MAVEN version =3.0.0, =6.0.1-rc.1, =1.2.3, =1.22.2, =1.13.6, =1.1.0, =2.0.0, =0.4.7, =0.4.7, =0.4.7, =1.17.0, =1.17.0, =1.17.0, =0.5.0, =0.0.9, =0.0.11 and more Source cves: CVE-2024-53990, CVE-2026-107228 Source advisory: OSV:GHSA-2JWH-9RMR-J4XFhttps://...

com.akamai.edgegrid:edgegrid-signer-async-http-client (>=6.0.1-rc.1, <=6.0.5), com.arpnetworking.metrics:mad-experimental (>=1.2.3, <=1.2.11) +93 more potentially affected by CVE-2024-53990 +1 more via org.asynchttpclient:async-http-client (>=3.0.0, <=3.0.13)

org.asynchttpclient:async-http-client MAVEN version =3.0.0, =6.0.1-rc.1, =1.2.3, =1.22.2, =1.13.6, =1.1.0, =2.0.0, =0.4.7, =0.4.7, =0.4.7, =1.17.0, =1.17.0, =1.17.0, =0.5.0, =0.0.9, =0.0.11 and more Source cves: CVE-2024-53990, CVE-2026-107228 Source advisory: GHSA-2JWH-9RMR-J4XFhttps://vuln...

EUVD-2026-94589

AsyncHttpClient CookieStore Silently Overrides Caller's Explicit Cookie Header via setHeader Bypass of CVE-2024-53990 Fix...

com.akamai.edgegrid:edgegrid-signer-async-http-client (>=6.0.1-rc.1, <=6.0.5), com.arpnetworking.metrics:mad-experimental (>=1.2.3, <=1.2.11) +93 more potentially affected by CVE-2026-107226 via org.asynchttpclient:async-http-client (>=3.0.0, <=3.0.13)

org.asynchttpclient:async-http-client MAVEN version =3.0.0, =6.0.1-rc.1, =1.2.3, =1.22.2, =1.13.6, =1.1.0, =2.0.0, =0.4.7, =0.4.7, =0.4.7, =1.17.0, =1.17.0, =1.17.0, =0.5.0, =0.0.9, =0.0.11 and more Source cves: CVE-2026-107226 Source advisory: GHSA-P2JM-6HJ6-9RJG...