Video yükleniyor...

Video Yüklenemedi

Ana Sayfaya Dön

Nginx is Dead - Actually Nginx is really dead and for context Kubernetes has also ended support for Nginx as ingress starting March 2026. Anyway, This in this video - let me explain the limitations of Nginx and talk about Envoy Proxy (Not Sponsored) as replacement for reverse Proxy. Envoy

piyushgarg_dev's profile picture

Piyush Garg

35,264 subscribers

23,859 görüntüleme • 1 ay önce •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

0 Yorum

Yorum bulunmuyor

Orijinal gönderinin yorumları burada görünecek

Benzer Videolar

I had a lot of fun working on this research! * Unauthenticated RCE? ✅ * Overlooked attack vector in Kubernetes? ✅ * Nginx quirks? ✅ * Stable & reliable exploit? ✅ Check out the thread for details about the vulnerability we found in Ingress Nginx Controller 👇
0:33

I had a lot of fun working on this research! * Unauthenticated RCE? ✅ * Overlooked attack vector in Kubernetes? ✅ * Nginx quirks? ✅ * Stable & reliable exploit? ✅ Check out the thread for details about the vulnerability we found in Ingress Nginx Controller 👇

sagitz

13,720 görüntüleme • 1 yıl önce

Here goes nginx-quicburst (CVE-2026-42530), a new RCE in Nginx discovered by our security agent VEGA and demonstrated by Nebula Security. This is only the third NGINX vulnerability since 2014 to receive NGINX’s “major” severity rating. If you use Nginx 1.31 with QUIC enabled, we recommend upgrading to the latest version. This bug has been patched in the latest Nginx release. We will publish the technical writeup, including the ASLR bypass, on July 18 together with the previous nginx-poolslip writeup.
0:27

Here goes nginx-quicburst (CVE-2026-42530), a new RCE in Nginx discovered by our security agent VEGA and demonstrated by Nebula Security. This is only the third NGINX vulnerability since 2014 to receive NGINX’s “major” severity rating. If you use Nginx 1.31 with QUIC enabled, we recommend upgrading to the latest version. This bug has been patched in the latest Nginx release. We will publish the technical writeup, including the ASLR bypass, on July 18 together with the previous nginx-poolslip writeup.

Nebula Security

88,484 görüntüleme • 13 gün önce

Come visit us today and tomorrow at #WasmCon! We're at the NGINX table and ready to talk all things WebAssembly.
0:31

Come visit us today and tomorrow at #WasmCon! We're at the NGINX table and ready to talk all things WebAssembly.

NGINX

13,439 görüntüleme • 2 yıl önce

CVE-2026-42530 NGINX RCE
0:27

CVE-2026-42530 NGINX RCE

Clandestine

56,869 görüntüleme • 13 gün önce

Attacks always get better. Here's a new nginx RCE that bypasses ASLR, tested on the latest nginx 1.30 and 1.31. This still requires a non-default config, but unlike some previous bugs, it does not depend on any additional vulnerabilities or external helpers to get to RCE. We reported the bug on May 15. F5 has confirmed it, and hopefully a patch will land soon. This is getting ridiculous 😅. We have enough nginx bugs to do an entire week of MAD Bugs on it. Who could have thought nginx is starting to feel like the new Linux kernel? This is the funniest time in computer hacking. And yet the world is completely unprepared for this new reality.
0:30

Attacks always get better. Here's a new nginx RCE that bypasses ASLR, tested on the latest nginx 1.30 and 1.31. This still requires a non-default config, but unlike some previous bugs, it does not depend on any additional vulnerabilities or external helpers to get to RCE. We reported the bug on May 15. F5 has confirmed it, and hopefully a patch will land soon. This is getting ridiculous 😅. We have enough nginx bugs to do an entire week of MAD Bugs on it. Who could have thought nginx is starting to feel like the new Linux kernel? This is the funniest time in computer hacking. And yet the world is completely unprepared for this new reality.

thaidn

33,063 görüntüleme • 1 ay önce

NGINX rift: We autonomously discovered this 18 yr old heap overflow (CVE-2026-42945) in NGINX impacting version 0.6.27 to 1.30.0. If you use rewrite and set directive, you maybe impacted! Please update your NGINX or change the config to mitigate it. Read more at
0:36

NGINX rift: We autonomously discovered this 18 yr old heap overflow (CVE-2026-42945) in NGINX impacting version 0.6.27 to 1.30.0. If you use rewrite and set directive, you maybe impacted! Please update your NGINX or change the config to mitigate it. Read more at

Zhenpeng (Leo) Lin

206,978 görüntüleme • 1 ay önce

‼️🚨 MAJOR IMPACT: AI just found an 18-year-old NGINX critical remote code execution vulnerability. It has been disclosed on GitHub including PoC code. - Affects NGINX 0.6.27 through 1.30.0 - Triggered via the rewrite and set directives in config - Update NGINX ASAP - NGINX is a widely used HTTP web server, be sure to check its prevalence in other products
0:36

‼️🚨 MAJOR IMPACT: AI just found an 18-year-old NGINX critical remote code execution vulnerability. It has been disclosed on GitHub including PoC code. - Affects NGINX 0.6.27 through 1.30.0 - Triggered via the rewrite and set directives in config - Update NGINX ASAP - NGINX is a widely used HTTP web server, be sure to check its prevalence in other products

International Cyber Digest

950,956 görüntüleme • 1 ay önce

Every 3rd website you visit runs Nginx. 18,959,833 of them can be hijacked right now. A bug from 2008 just got a working exploit. CVE-2026-42945 (CVSS 9.2) No login. No access. Just one HTTP request. → Heap overflow → Worker process → RCE Patch ASAP to Nginx 1.31.0 or 1.30.1 PoC is already out:
0:36

Every 3rd website you visit runs Nginx. 18,959,833 of them can be hijacked right now. A bug from 2008 just got a working exploit. CVE-2026-42945 (CVSS 9.2) No login. No access. Just one HTTP request. → Heap overflow → Worker process → RCE Patch ASAP to Nginx 1.31.0 or 1.30.1 PoC is already out:

Het Mehta

152,192 görüntüleme • 1 ay önce

🚨 ‘Frankly, in a way it is’ – US envoy ADMITS NATO PROXY WAR against Russia US special envoy for Ukraine Keith Kellogg let the mask slip in a Fox News interview, conceding that Russian President Vladimir Putin may have a point: 💬 "He [Putin] considers this a proxy war by NATO as well right now. And frankly, in a way it is." Kellogg cited European military support as evidence — unintentionally confirming what Washington has long denied. So much for “not being a party to the conflict.”
0:21

🚨 ‘Frankly, in a way it is’ – US envoy ADMITS NATO PROXY WAR against Russia US special envoy for Ukraine Keith Kellogg let the mask slip in a Fox News interview, conceding that Russian President Vladimir Putin may have a point: 💬 "He [Putin] considers this a proxy war by NATO as well right now. And frankly, in a way it is." Kellogg cited European military support as evidence — unintentionally confirming what Washington has long denied. So much for “not being a party to the conflict.”

Sputnik

14,955 görüntüleme • 1 yıl önce

Skiff is a new, small tool for deploying static marketing sites using Kamal. Built on #NoBuild ideas, stone-age tools like Server Side Includes, and running with nginx. We use it to run and already. Enjoy!
12:11

Skiff is a new, small tool for deploying static marketing sites using Kamal. Built on #NoBuild ideas, stone-age tools like Server Side Includes, and running with nginx. We use it to run and already. Enjoy!

DHH

130,389 görüntüleme • 2 yıl önce

Still "Lab", but working fully remotely without any hardcoded offsets, bypassing ASLR on standard Ubuntu + Nginx deployment via an LFI primitive. There's still lots of room for improvement but I'm already out of tea and who cares? Just patch.
0:33

Still "Lab", but working fully remotely without any hardcoded offsets, bypassing ASLR on standard Ubuntu + Nginx deployment via an LFI primitive. There's still lots of room for improvement but I'm already out of tea and who cares? Just patch.

Hamid Kashfi

25,021 görüntüleme • 1 ay önce

📹 Self-Hosting Next.js Learn how to deploy Next.js, Postgres, and Nginx to a $4 VPS with Docker. I'll explain how to use and configure Next.js features like image optimization, caching & ISR, streaming, middleware, server components, and more. Demo app is open source!
45:12

📹 Self-Hosting Next.js Learn how to deploy Next.js, Postgres, and Nginx to a $4 VPS with Docker. I'll explain how to use and configure Next.js features like image optimization, caching & ISR, streaming, middleware, server components, and more. Demo app is open source!

Lee Robinson

568,193 görüntüleme • 1 yıl önce

Have you ever seen an Nginx container packed into a Unikernel and launched on a Firecracker microVM? 🤯 Alexander Jung Alexander Jung showed me today how easy it actually is to turn pretty much any Dockerfile into a unikernel - thanks to the amazing tech the Unikraft folks built.
0:56

Have you ever seen an Nginx container packed into a Unikernel and launched on a Firecracker microVM? 🤯 Alexander Jung Alexander Jung showed me today how easy it actually is to turn pretty much any Dockerfile into a unikernel - thanks to the amazing tech the Unikraft folks built.

Ivan Velichko

27,591 görüntüleme • 1 yıl önce

we talk a lot about evil dead 2013's ending, but for me this is also one of the best horror sequences of all time
2:10

we talk a lot about evil dead 2013's ending, but for me this is also one of the best horror sequences of all time

evil

41,149 görüntüleme • 1 yıl önce

Sowell on why affirmative action backfires: “Race is used as a proxy for something it is not a proxy for.” “The vast majority of blacks who go to places like Harvard, Cornell, and Stanford are not blacks from the ghetto. They’re from the same neighborhoods as the whites there.”
0:48

Sowell on why affirmative action backfires: “Race is used as a proxy for something it is not a proxy for.” “The vast majority of blacks who go to places like Harvard, Cornell, and Stanford are not blacks from the ghetto. They’re from the same neighborhoods as the whites there.”

Thomas Sowell Daily

15,534 görüntüleme • 2 ay önce

403 on /get_all_users 404 on /get_all_userz Then Justin Gardner fuzzed until a double-encoded “S” slipped past the NGINX filter. Result: 4.5M users' PII dumped. Bounty: $15K–$20K Full talk → #BugBounty #DEFCON #BBV #AppSec #WebSecurity
1:00

403 on /get_all_users 404 on /get_all_userz Then Justin Gardner fuzzed until a double-encoded “S” slipped past the NGINX filter. Result: 4.5M users' PII dumped. Bounty: $15K–$20K Full talk → #BugBounty #DEFCON #BBV #AppSec #WebSecurity

Bug Bounty Village

57,876 görüntüleme • 1 yıl önce

This signals the end for Hamas in Gaza, as clear as the weapon's embrace and the chubby belly of this heinous figure. Victory for humanity as more Iranian proxy-armed terrorists surrender today. #HamasisISIS #Israel
0:21

This signals the end for Hamas in Gaza, as clear as the weapon's embrace and the chubby belly of this heinous figure. Victory for humanity as more Iranian proxy-armed terrorists surrender today. #HamasisISIS #Israel

Amjad Taha أمجد طه

175,982 görüntüleme • 2 yıl önce

Why doesn't the media talk about the DR of Congo? I’ve lived in this country for years, beautiful and peaceful people. Congo is bleeding, It has not ended over 5 million people are dead. The world must remember that we live in a society, not an economy.
0:29

Why doesn't the media talk about the DR of Congo? I’ve lived in this country for years, beautiful and peaceful people. Congo is bleeding, It has not ended over 5 million people are dead. The world must remember that we live in a society, not an economy.

Mohamad Safa

22,167 görüntüleme • 6 ay önce

We can disregard any talk about “statute of limitations”. Trump’s team have made it clear this is an ACTIVE AND ONGOING conspiracy. The coup never ended. It’s still ongoing. It’s all one continuous motion. As for accountability? The messaging has been clear. It’s happening.
2:19

We can disregard any talk about “statute of limitations”. Trump’s team have made it clear this is an ACTIVE AND ONGOING conspiracy. The coup never ended. It’s still ongoing. It’s all one continuous motion. As for accountability? The messaging has been clear. It’s happening.

Clandestine

65,512 görüntüleme • 11 ay önce