Hosted on MSN

NGINX map regex RCE gets public scanner: Patch now, full exploit due August

A security researcher released a public static config scanner Monday for a critical heap buffer overflow in NGINX that has existed since 2011, and the full proof-of-concept exploit that can deliver ...
Hosted on MSN

A remote denial-of-service exploit affects every major web server — NGINX, Apache HTTPD, Microsoft IIS, Envoy, and Cloudflare Pingora — researchers warn

Security researchers have identified a remote denial-of-service attack technique that targets HTTP/2 compression handling across five of the most widely deployed web servers: NGINX, Apache HTTPD, ...
Help Net Security

Ingress-nginx vulnerabilities can lead to Kubernetes cluster takeover

Wiz researchers have unearthed several critical vulnerabilities affecting Ingress NGINX Controller for Kubernetes (ingress-nginx) that may allow attackers to take over Kubernetes clusters. “Based on ...