Web Server Security

HTTP/2 Bomb Exploit Details and PoC Publicly Disclosed

• Vulnerability Report

HTTP/2 Bomb Exploit Details and PoC Publicly Disclosed

Do Son June 3, 2026 0

A devastating network security threat has shocked the web hosting industry this week. Specifically, Calif, a security...

Read More Read more about HTTP/2 Bomb Exploit Details and PoC Publicly Disclosed

Nginx Releases Critical Update: Six Vulnerabilities Patched in New Stable Version

• Vulnerability Report

Nginx Releases Critical Update: Six Vulnerabilities Patched in New Stable Version

Do Son May 14, 2026 0

The web infrastructure world received a major wake-up call today as nginx-1.30.1 was released to address a...

Read More Read more about Nginx Releases Critical Update: Six Vulnerabilities Patched in New Stable Version

Pre-Auth RCE Exposed: Apache HTTP Server Vulnerability and Exploit Code Hit the Public

• Vulnerability

Pre-Auth RCE Exposed: Apache HTTP Server Vulnerability and Exploit Code Hit the Public

Do Son May 13, 2026 0

The detailed disclosure of a critical flaw in Apache HTTP Server 2.4.66 is now public. The vulnerability,...

Read More Read more about Pre-Auth RCE Exposed: Apache HTTP Server Vulnerability and Exploit Code Hit the Public

PolyShell Exposed: Public PoC and Active Exploitation Disclosed for Critical Magento RCE as Automated Attacks Surge

• Vulnerability

PolyShell Exposed: Public PoC and Active Exploitation Disclosed for Critical Magento RCE as Automated Attacks Surge

Do Son April 1, 2026 0

Magento remains a titan in the e-commerce space, currently “estimated to be running on more than 130,000...

Read More Read more about PolyShell Exposed: Public PoC and Active Exploitation Disclosed for Critical Magento RCE as Automated Attacks Surge

Under Active Attack: Nginx UI’s Critical 9.8 Vulnerability Exploited in the Wild

• Vulnerability Report

Under Active Attack: Nginx UI’s Critical 9.8 Vulnerability Exploited in the Wild

Do Son March 31, 2026 0

The popular web-based management interface, Nginx UI, is under fire following the public disclosure of a critical...

Read More Read more about Under Active Attack: Nginx UI’s Critical 9.8 Vulnerability Exploited in the Wild

F5 Out-of-Band Security Alert: Multiple Vulnerabilities Unveiled in NGINX Plus and Open Source

• Vulnerability Report

F5 Out-of-Band Security Alert: Multiple Vulnerabilities Unveiled in NGINX Plus and Open Source

Do Son March 25, 2026 0

In a significant out-of-band security notification released on March 24, 2026, F5 has disclosed several critical and...

Read More Read more about F5 Out-of-Band Security Alert: Multiple Vulnerabilities Unveiled in NGINX Plus and Open Source

Bypassing the Bouncer: Apache Tomcat Patches SNI & Legacy Protocol Flaws

• Vulnerability Report

Bypassing the Bouncer: Apache Tomcat Patches SNI & Legacy Protocol Flaws

Do Son February 20, 2026 0

The Apache Software Foundation has rolled out a trio of security updates for its ubiquitous Apache Tomcat...

Read More Read more about Bypassing the Bouncer: Apache Tomcat Patches SNI & Legacy Protocol Flaws

The Invisible Proxy: NGINX Hijacked for Silent SEO Poisoning

• Cybercriminals

The Invisible Proxy: NGINX Hijacked for Silent SEO Poisoning

Do Son February 6, 2026 0

A new campaign is targeting the backbone of the web, compromising NGINX servers to silently redirect user...

Read More Read more about The Invisible Proxy: NGINX Hijacked for Silent SEO Poisoning

High-Severity NGINX Flaw Lets Attackers Inject Malicious Data

• Vulnerability

High-Severity NGINX Flaw Lets Attackers Inject Malicious Data

Do Son February 5, 2026 0

F5 has issued a security advisory for a high-severity vulnerability affecting NGINX, the world’s most popular web...

Read More Read more about High-Severity NGINX Flaw Lets Attackers Inject Malicious Data

Ghost Folders: “Directory Shadowing” Hack Hijacks WordPress SEO

• Cybercriminals

Ghost Folders: “Directory Shadowing” Hack Hijacks WordPress SEO

Do Son February 5, 2026 0

A new and stealthy malware campaign is targeting WordPress sites, turning trusted pages into billboards for online...

Read More Read more about Ghost Folders: “Directory Shadowing” Hack Hijacks WordPress SEO