⤷ Title: A Single Swapped HTTP Host Header Can Quietly Hijack an Entire Account
════════════════════════
𐀪 Author: Sambhab Sahoo
════════════════════════
ⴵ Time: Fri, 12 Jun 2026 02:35:37 GMT
════════════════════════
⌗ Tags: #ethical_hacking #infosec #cybersecurity #http_request #burpsuite
════════════════════════
𐀪 Author: Sambhab Sahoo
════════════════════════
ⴵ Time: Fri, 12 Jun 2026 02:35:37 GMT
════════════════════════
⌗ Tags: #ethical_hacking #infosec #cybersecurity #http_request #burpsuite
Medium
A Single Swapped HTTP Host Header Can Quietly Hijack an Entire Account
Single unvalidated request header can become an execution vehicle for password poisoning and server-side exploitation.
⤷ Title: F5 Patches Two Critical NGINX Flaws in HTTP/3 and HTTP/2 Modules (CVE-2026-42530, CVE-2026-42055)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 02:23:02 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #buffer overflow #CVE_2026_42055 #CVE_2026_42530 #F5 #HTTP/3 #nginx #NGINX vulnerabilities #use after free
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 02:23:02 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #buffer overflow #CVE_2026_42055 #CVE_2026_42530 #F5 #HTTP/3 #nginx #NGINX vulnerabilities #use after free
Daily CyberSecurity
F5 Patches Two Critical NGINX Flaws in HTTP/3 and HTTP/2 Modules (CVE-2026-42530, CVE-2026-42055)
Two critical NGINX vulnerabilities, CVE-2026-42530 and CVE-2026-42055, let remote attackers crash workers and possibly run code. Patch NGINX now.
⤷ Title: HTTP Request Smuggling vs HTTP Request Pipelining: Why They’re Often Confused
════════════════════════
𐀪 Author: Amit Pal | amitpxl
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 13:51:09 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #http_request_smuggling #application_security #web_application_security
════════════════════════
𐀪 Author: Amit Pal | amitpxl
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 13:51:09 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #http_request_smuggling #application_security #web_application_security
Medium
HTTP Request Smuggling vs HTTP Request Pipelining: Why They’re Often Confused
Stop screenshotting every double response in Burp Repeater. Here’s how to separate harmless protocol features from actual queue poisoning.
⤷ Title: Quick overview of RFC 10008: The HTTP QUERY Method
════════════════════════
𐀪 Author: Sanjeev Jaiswal (Jassi)
════════════════════════
ⴵ Time: Fri, 03 Jul 2026 09:35:19 GMT
════════════════════════
⌗ Tags: #api_security #rfc_10008 #application_security #web_development #http_methods
════════════════════════
𐀪 Author: Sanjeev Jaiswal (Jassi)
════════════════════════
ⴵ Time: Fri, 03 Jul 2026 09:35:19 GMT
════════════════════════
⌗ Tags: #api_security #rfc_10008 #application_security #web_development #http_methods
Medium
Quick overview of RFC 10008: The HTTP QUERY Method
A new HTTP method just shipped that GET and POST have needed for 25 years.
⤷ Title: HTTP QUERY Method Explained:
════════════════════════
𐀪 Author: Simran Madhok
════════════════════════
ⴵ Time: Sat, 04 Jul 2026 16:28:50 GMT
════════════════════════
⌗ Tags: #http_query #api_development #rest_api #api_security #web_development
════════════════════════
𐀪 Author: Simran Madhok
════════════════════════
ⴵ Time: Sat, 04 Jul 2026 16:28:50 GMT
════════════════════════
⌗ Tags: #http_query #api_development #rest_api #api_security #web_development
Medium
HTTP QUERY Method Explained: RFC 10008 and the Future of Safe API Queries
Switch to QUERY http method Secure coding should always be the top priority for developers while building applications. Hence it was a welcome news when the HTTP QUERY Method was formally introduced …
⤷ Title: HTTP QUERY Method: A New Era for API Query Operations
════════════════════════
𐀪 Author: Shubham Girme
════════════════════════
ⴵ Time: Wed, 15 Jul 2026 11:03:40 GMT
════════════════════════
⌗ Tags: #http_query_method #http_methods #query_vs_get_vs_post #api_security #https
════════════════════════
𐀪 Author: Shubham Girme
════════════════════════
ⴵ Time: Wed, 15 Jul 2026 11:03:40 GMT
════════════════════════
⌗ Tags: #http_query_method #http_methods #query_vs_get_vs_post #api_security #https
Medium
HTTP QUERY Method: A New Era for API Query Operations
As modern APIs increasingly require expressive query capabilities, HTTP QUERY offers a standardized solution for transmitting complex…
⤷ Title: HTTP Request Smuggling: Turning Two Servers Against Each Other on a Single TCP Connection
════════════════════════
𐀪 Author: Furkanalpgunay
════════════════════════
ⴵ Time: Sat, 18 Jul 2026 11:22:27 GMT
════════════════════════
⌗ Tags: #bug_bounty #http_request_smuggling #cybersecurity #penetration_testing #web_security
════════════════════════
𐀪 Author: Furkanalpgunay
════════════════════════
ⴵ Time: Sat, 18 Jul 2026 11:22:27 GMT
════════════════════════
⌗ Tags: #bug_bounty #http_request_smuggling #cybersecurity #penetration_testing #web_security
Medium
HTTP Request Smuggling: Turning Two Servers Against Each Other on a Single TCP Connection
From CL.TE and TE.CL to HTTP/2 downgrade and client-side desync — a complete, hands-on guide built from 20+ labs I solved myself.
⤷ Title: HTTP/2 DoS Vulnerability Lets Attackers Exhaust Server Memory via Stalled Flow Control
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 15:00:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Traffic Server #CVE_2026_44909 #CVE_2026_59173 #CVE_2026_59762 #Denial of Service #HTTP/2 DoS vulnerability #memory exhaustion #stalled flow control
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 15:00:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Traffic Server #CVE_2026_44909 #CVE_2026_59173 #CVE_2026_59762 #Denial of Service #HTTP/2 DoS vulnerability #memory exhaustion #stalled flow control
Daily CyberSecurity
HTTP/2 DoS Vulnerability Lets Attackers Exhaust Server Memory via Stalled Flow Control
A newly disclosed HTTP/2 DoS vulnerability affects several server implementations at once. A remote, unauthenticated attacker can crash or freeze a server by abusing normal flow-control settings. …
⤷ Title: Node.js Patches 11 Vulnerabilities in July 2026 Security Release
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 15:29:29 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_56846 #CVE_2026_56848 #CVE_2026_58043 #HTTP/2 #Node.js Security #nodejs #use after free
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 15:29:29 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_56846 #CVE_2026_56848 #CVE_2026_58043 #HTTP/2 #Node.js Security #nodejs #use after free
Daily CyberSecurity
Node.js Patches 11 Vulnerabilities in July 2026 Security Release
TL;DR Node.js shipped fixes for 11 vulnerabilities on 29 July 2026. Three are rated high severity, and the rest are medium or low. The updates cover the 26.x, 24.x, and 22.x release lines. No in-t…
⤷ Title: CVE-2026-42530: NGINX HTTP/3 RCE Proof-of-Concept Publicly Disclosed
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 30 Jul 2026 13:02:26 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_42530 #HTTP/3 #nginx #NGINX HTTP/3 #ngx_http_v3_module #proof_of_concept #QPACK #QUIC #Remote Code Execution #use after free
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 30 Jul 2026 13:02:26 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_42530 #HTTP/3 #nginx #NGINX HTTP/3 #ngx_http_v3_module #proof_of_concept #QPACK #QUIC #Remote Code Execution #use after free
Daily CyberSecurity
CVE-2026-42530: NGINX HTTP/3 RCE Proof-of-Concept Publicly Disclosed
TL;DR: A public proof-of-concept now targets CVE-2026-42530, an NGINX HTTP/3 RCE flaw rated CVSS 9.2. The use-after-free sits in the QPACK code of the HTTP/3 module. F5 fixed it in NGINX Open Sour…