/
data_types_exposed:session_data × limpar

Resultados

2 casos · pág. 1/1

gbhackers.com · medium

Apache Tomcat patches eight flaws including JNDIRealm authentication bypass and HTTP/2 cross-user data exposure

Apache disclosed eight vulnerabilities in Apache Tomcat, three rated Important and five rated Low. They cover authentication bypass, cross-user data exposure, insecure socket access and cryptographic configuration failures. Fixes are in Tomcat 11.0.27, 10.1.61 and 9.0.123, depending on the branch. Exposure depends on the component and con…

CVE-2026-101296 CVE-2026-103119 CVE-2026-101356
thehackernews.com · high

MALFEX npm campaign: 'imgdecode' package hides shellcode loader in Windows native addon, delivers Node.js stealer/RAT

Researchers at SafeDep identified imgdecode, a malicious npm package tied to the long-running MALFEX supply chain campaign first documented by Checkmarx and CloudSEK. Published on September 30, 2026 by user "malfexteste8", it has been downloaded 979 times and was still available at the time of reporting (latest version 1.0.3). MALFEX has …

technology software development