Hosted on MSN

NGINX map regex RCE gets public scanner: Patch now, full exploit due August

A security researcher released a public static config scanner Monday for a critical heap buffer overflow in NGINX that has existed since 2011, and the full proof-of-concept exploit that can deliver ...
Hosted on MSN

A remote denial-of-service exploit affects every major web server — NGINX, Apache HTTPD, Microsoft IIS, Envoy, and Cloudflare Pingora — researchers warn

Security researchers have identified a remote denial-of-service attack technique that targets HTTP/2 compression handling across five of the most widely deployed web servers: NGINX, Apache HTTPD, ...