Sunday 19 July 2026 17:46:47 GMT+02:00
Netcrook
#unauthenticated request
ColdFusion’s Weak Link Was Not Speed - It Was Trust
A design argument around Adobe ColdFusion points to a broader security lesson: when a connector accepts the wrong request, patch urgency becomes only half the story.
The Setup Trap Inside Hoppscotch’s Self-Hosted Backend
A critical onboarding flaw shows how one unauthenticated request can become a secret-writing primitive, putting JWT trust at risk before a deployment is even fully configured.
NGINX Patches Expose a Fragile Edge: When Config Becomes the Attack Surface
Fresh critical and high-severity NGINX fixes show how a few rewrite and proxy directives can turn an internet-facing layer into a crash point, and in narrower conditions, a path toward code execution.