CVE-2026-42945

CVE-2026-42945 PoC Go Deutsch | English Ein Erkennungs- und Exploit-Hilfstool für die nginx HTTP/2-Implementierung CVE-2026-42945 , das in autorisierten Umgebungen verwendet wird, um das Vorhandensein der Schwachstelle zu überprüfen, die Wirksamkeit von Patches zu testen und das PoC-Verhalten in...

CVE-2026-4253-Scanner

CVE-2026-42530 — Scanner Safe-Check Scanner em massa não destrutivo para o use-after-free do NGINX HTTP/3 QUIC Inventarie quais dos seus hosts estão expostos — sem nunca acionar a falha. ⚠️ Aviso legal Esta ferramenta destina-se somente a testes de segurança autorizados — na sua própria...

EUVD-2011-4874

Malware in sbrugna...

Internet Bug Bounty: TLS client authentication can be bypassed due to ticket resumption

The TLS client authentication can be bypassed due to ticket resumption. The issue was that TLS session tickets were not properly isolated for multiple virtual hosts in one server. This allowed a ticket issued for one virtual host to be resumed at a different virtual host, circumventing client...

CVE-2024-24990 NGINX HTTP/3 QUIC vulnerability

When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate. Note: The HTTP/3 QUIC module is not enabled by default and is considered experimental. For more information, refer to Support for QUIC and HTTP/3...

CVE-2011-4968

nginx http proxy module does not verify peer identity of https origin server which could facilitate man-in-the-middle attack MITM...

Denial Of Service (DoS)

nginx HTTP/2 is vulnerable to denial of service DoS. It does not prevent the attacker from creating multiple request streams and flooding using PRIORITY frames continuously in a way that causes substantial churn to the priority tree, causing an excessive resource consumption...