Denial Of Service (DoS)

Next.js is vulnerable to Denial Of Service DoS. The vulnerability is due to improper handling of requests targeting App Router applications with Server Actions running on the Edge runtime, allowing attackers to trigger excessive memory consumption and degrade application availability...

CVE-2026-55969

creationtimestamp| type| source ---|---|--- 2026-07-24 23:17:39+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrgie47v7k24 2026-07-28 17:22:13+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/apache-security-advisory-av26-749 2026-07-29 01:07:08+00:00| seen|...

Malicious code in app-data-layer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc306d8463afd4c0baadf4af1627986a5cb136d516c71415957fa606150008bd Analysis of [email protected] 3 files scanned produced no static or traced findings. No lifecycle hooks fetching or executing remote content, no...

Malicious code in app-data-lts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f9d67601ec8b46265e1f23f5e48ff5beb050626f4bc156b291cb1b8f8c36d35 package.json declares postinstall node test.js and main: index.js, but index.js is absent from the tarball. test.js executes require'.', which throws...

MAL-2026-11053 Malicious code in app-data-lts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f9d67601ec8b46265e1f23f5e48ff5beb050626f4bc156b291cb1b8f8c36d35 package.json declares postinstall node test.js and main: index.js, but index.js is absent from the tarball. test.js executes require'.', which throws...

MAL-2026-11054 Malicious code in app-node-layer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175a4ca1d8f0f386347ce87b04012ff634cc3dee7b08117e72bcfa1562a213e4 The package's postinstall script test.js executes multiple installer-side attacks on npm install. It recursively walks the installation working...

Malicious code in app-node-layer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175a4ca1d8f0f386347ce87b04012ff634cc3dee7b08117e72bcfa1562a213e4 The package's postinstall script test.js executes multiple installer-side attacks on npm install. It recursively walks the installation working...

MAL-2026-11052 Malicious code in app-data-layer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc306d8463afd4c0baadf4af1627986a5cb136d516c71415957fa606150008bd Analysis of [email protected] 3 files scanned produced no static or traced findings. No lifecycle hooks fetching or executing remote content, no...

Security Bulletin: SOAR App Host is using a component with known vulnerabilities (CVE-2026-22016, CVE-2026-22021, CVE-2026-22013, CVE-2026-22018)

Summary SOAR App Host uses an older version of IBM SDK, Java Technology that may be identified and exploited. Updates for supported versions have been released which address the issue. It is recommended to upgrade to version 1.15.9.0 Vulnerability Details CVEID:CVE-2026-22016 DESCRIPTION: Easily...

CVE-2026-58630

Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-48602

Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-58630 Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability

...

CVE-2026-58630 Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability

...

CVE-2026-58630

CVE-2026-58630 concerns Azure App Service on Azure Stack Hub. The issue is improper access control that allows an unauthenticated attacker to elevate privileges over a network. Impact is high for confidentiality and integrity; CVSS 3.1 base score 10.0. Connected sources confirm the name and core ...

NPM: electron-updater: Uncontrolled search path elements within `AppImage` built by `app-builder-lib`

NPM: electron-updater: Uncontrolled search path elements within AppImage built by app-builder-lib vulnerability discovered by ? in WordPress Npm app-builder-lib versions 26.15.0...

electron-updater: Uncontrolled search path elements within `AppImage` built by `app-builder-lib`

Summary AppImage targets built by app-builder-lib could use an empty path component when setting the LDLIBRARYPATH environment variable at runtime. This causes the current working directory to be added to the dynamic linker search path, which may allow an attacker to execute arbitrary code by...

CVE-2026-66009 Parse Server 9.0.0 Information Disclosure via GraphQL Error Messages

Parse Server versions = 9.0.0 before 9.10.0-alpha.5 and = 8.2.2 before 8.6.86 return GraphQL validation error messages that name required custom input fields even when public introspection is disabled graphQLPublicIntrospection: false, the default. A client holding only the public application id ...

CVE-2026-66009

Parse Server versions = 9.0.0 before 9.10.0-alpha.5 and = 8.2.2 before 8.6.86 return GraphQL validation error messages that name required custom input fields even when public introspection is disabled graphQLPublicIntrospection: false, the default. A client holding only the public application id ...

CVE-2026-12981

creationtimestamp| type| source ---|---|--- 2026-07-24 07:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116973779458861264 2026-07-24 07:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mretgfvnq42h 2026-07-24 21:52:27+00:00| seen|...

PT-2026-64316

Name of the Vulnerable Software and Affected Versions Azure App Service affected versions not specified Description Improper access control allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about a newer version that...