Incidents

nginx HTTP/3 QPACK use-after-free

PHP-CGI argument injection to remote code execution

Redis Lua sandbox escape via cjson

OpenSSH ssh-agent forwarding PKCS#11 provider load

Node.js undici request smuggling via chunk extensions

PostgreSQL libpq quoting bypass in psql

PHP mb_strcut heap over-read

PHP 7.4 session upload progress deserialization

PHP iconv() glibc buffer overflow (CNEXT)

Atlassian Confluence OGNL template injection

Apache Log4j2 JNDI lookup remote code execution

Apache HTTP Server 2.4.49 path traversal & RCE

PHP-FPM env_path_info underflow (nginx misconfig)

Microsoft SMBv1 remote code execution (WannaCry)

OpenSSL TLS heartbeat out-of-bounds read