https://appsecscoop.com/c/vulnerabilities/projectsend-api-flaw-allows-token-holders-to/AppSec Scoopen2026-10-18T12:32:24ZProjectSend API flaw allows token holders to reset owner credentialshttps://appsecscoop.com/c/vulnerabilities/unpatched-snac2-heap-overflow-exposes-activitypub/AppSec Scoopen2026-10-18T12:15:46ZUnpatched snac2 Heap Overflow Exposes ActivityPub Servers to Remote Crasheshttps://appsecscoop.com/c/vulnerabilities/organisations-must-urgently-update-aws-tough-0-22/AppSec Scoopen2026-10-17T22:32:42ZOrganisations Must URGently Update AWS Tough 0.22.0 and Tuftool 0.15.0 With No Workaroundshttps://appsecscoop.com/c/vulnerabilities/course-tencent-cloud-users-face-critical-account/AppSec Scoopen2026-10-17T20:49:25ZCourse-Tencent-Cloud Users Face Critical Account Takeover Due to Unlimited SMS Brute Force in Versions Up to 2.0.1https://appsecscoop.com/c/vulnerabilities/unauthenticated-access-to-cloud-credentials-in/AppSec Scoopen2026-10-17T19:00:05ZUnauthenticated Access to Cloud Credentials in Netdisk-Fast-Downloadhttps://appsecscoop.com/c/vulnerabilities/openhuman-csrf-flaw-allows-session-hijacking-in/AppSec Scoopen2026-10-17T18:13:14ZOpenHuman CSRF flaw allows session hijacking in versions before 0.56.0https://appsecscoop.com/c/vulnerabilities/registrar-suspends-domain-linked-to-fake/AppSec Scoopen2026-10-17T17:30:37ZRegistrar suspends domain linked to fake-recruiter trojan campaignhttps://appsecscoop.com/c/vulnerabilities/mariadb-gis-buffer-overflow-allows-remote-code/AppSec Scoopen2026-10-16T17:00:56ZMariaDB GIS Buffer Overflow Allows Remote Code Execution in Serverhttps://appsecscoop.com/c/vulnerabilities/xworm-c2-panel-flaw-allows-remote-code-execution/AppSec Scoopen2026-10-16T15:07:30ZXWorm C2 Panel Flaw Allows Remote Code Execution Without Authenticationhttps://appsecscoop.com/c/vulnerabilities/medical-records-exposed-j4care-dcm4chee-arc-light/AppSec Scoopen2026-10-16T15:06:33ZMedical Records Exposed: J4Care dcm4chee-arc-light Default Config Enables Unauthenticated Accesshttps://appsecscoop.com/c/cyber-attacks/global-firms-hit-by-750m-spam-messages-as-yam/AppSec Scoopen2026-10-16T12:39:50ZGlobal Firms Hit by 750M Spam Messages as YAM Store Phishing Hub Is Dismantled