#Web Server
All CosmicBytez Labs articles tagged #Web Server, across news, security advisories, how-to guides, and projects.
- News
Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution
F5 has patched CVE-2026-42533, a critical heap buffer overflow in NGINX that allows unauthenticated remote attackers to crash worker processes and...
- Security
CVE-2026-42533: NGINX Memory Corruption via Map Directive Regex (CVSS 8.1)
A vulnerability in NGINX Plus and NGINX Open Source allows map directives using regex matching with capture variables to trigger memory corruption when...
- News
LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run
A maximum-severity vulnerability in the LiteSpeed User-End cPanel Plugin, tracked as CVE-2026-48172 with a CVSS score of 10.0, is under active...
- News
NGINX CVE-2026-42945 Exploited in the Wild, Causing Worker
A heap buffer overflow in NGINX's rewrite module is under active exploitation, days after disclosure. The CVSS 9.2 flaw impacts both NGINX Plus and Open...
- News
PoC Code Published for Critical NGINX Vulnerability
A proof-of-concept exploit has been released for a critical-severity NGINX vulnerability that has existed in the rewrite module for nearly two decades....
- News
18-Year-Old NGINX Rewrite Module Flaw Enables
Researchers have disclosed multiple critical vulnerabilities in NGINX Plus and NGINX Open Source, including a heap buffer overflow in...
- News
18-Year-Old NGINX Vulnerability Allows DoS and Potential RCE
An autonomous scanning system has uncovered an 18-year-old flaw in the NGINX open-source web server that can be exploited for denial of service and, under...
- Security
CVE-2026-35392: Critical Path Traversal in goshs Go HTTP
A critical CVSS 9.8 path traversal vulnerability in goshs, a SimpleHTTPServer written in Go, allows unauthenticated attackers to write arbitrary files via...
- Security
CVE-2018-25169: Denial of Service Vulnerability Catalogued
A denial of service vulnerability in AMPPS 2.7, a local web server stack for developers, has been formally assigned CVE-2018-25169 with a CVSS score of...