Skip to content
Threat Feed
Subscribe

Tag

Microservices

2 briefs RSS
medium advisory

Detection of Unauthorized Apache Thrift RPC Invocations from External Networks

Detection logic targeting unauthorized Apache Thrift RPC method invocations from external IP addresses to identify exposed internal microservices or potential exploitation of data platforms.

Thrift network-security initial-access microservices
1r 1t 1c
high advisory

NestJS Microservices Denial-of-Service via Recursive handleData

A denial-of-service vulnerability exists in NestJS's @nestjs/microservices package, affecting versions 11.1.18 and earlier, where an attacker can send multiple small, valid JSON messages within a single TCP frame, causing a stack overflow.

nestjs denial-of-service microservices
2r 1t