πNew WriteupβοΈ
βββββββββββββββ
πDate: Fri, 20 Oct 2023 12:20:26 GMT
βββββββββββββββ
βοΈTitle: ModSecurity Rule 932105 Execution errorβββPCRE limits exceeded
βββββββββββββββ
πLink: https://medium.com/p/1964ece6297b
βββββββββββββββ
Tags: #modsecurity #information_security #infosec #sysadmin #apache
βββββββββββββββ
πDate: Fri, 20 Oct 2023 12:20:26 GMT
βββββββββββββββ
βοΈTitle: ModSecurity Rule 932105 Execution errorβββPCRE limits exceeded
βββββββββββββββ
πLink: https://medium.com/p/1964ece6297b
βββββββββββββββ
Tags: #modsecurity #information_security #infosec #sysadmin #apache
Medium
ModSecurity Rule 932105 Execution errorβββPCRE limits exceeded
mod_security / ModSecurity / ModSec / whatever the kids are calling it today is a battle-tested Web Application Firewall that plugs intoβ¦
β€· Title: ModSecurity WAF ile IoT CihazlarΔ±nΔ± Koruma
ββββββββββββββββββββββββ
πͺ Author: Hasan MeriΓ§ YΔ±ldΔ±z
ββββββββββββββββββββββββ
β΄΅ Time: Fri, 10 Jan 2025 23:13:50 GMT
ββββββββββββββββββββββββ
β Tags: #cybersecurity #iot #firewall #modsecurity #waf
ββββββββββββββββββββββββ
πͺ Author: Hasan MeriΓ§ YΔ±ldΔ±z
ββββββββββββββββββββββββ
β΄΅ Time: Fri, 10 Jan 2025 23:13:50 GMT
ββββββββββββββββββββββββ
β Tags: #cybersecurity #iot #firewall #modsecurity #waf
Medium
ModSecurity WAF ile IoT CihazlarΔ±nΔ± Koruma
Bu projede, IoT cihazlarΔ±nΔ±n gΓΌvenliΔini artΔ±rmak amacΔ±yla bir Web Application Firewall (WAF) Γ§ΓΆzΓΌmΓΌ geliΕtirilmiΕtir. Ubuntu iΕletimβ¦
β€· Title: CVE-2025-27110: ModSecurity Vulnerability Leaves Web Applications Exposed
ββββββββββββββββββββββββ
πͺ Author: do son
ββββββββββββββββββββββββ
β΄΅ Time: Sat, 01 Mar 2025 01:48:59 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability #CVE_2025_27110 #libmodsecurity3 #modsecurity #Web Application Firewall
ββββββββββββββββββββββββ
πͺ Author: do son
ββββββββββββββββββββββββ
β΄΅ Time: Sat, 01 Mar 2025 01:48:59 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability #CVE_2025_27110 #libmodsecurity3 #modsecurity #Web Application Firewall
Daily CyberSecurity
CVE-2025-27110: ModSecurity Vulnerability Leaves Web Applications Exposed
Understand the implications of CVE-2025-27110 on web application security and how it may allow attacks to bypass defenses.
β€· Title: ModSecurity DoS Flaw: PoC Available for Apache Vulnerability (No Workaround, Patch Pending)
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Fri, 23 May 2025 00:27:36 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability #apache #CVE_2025_47947 #dos #Json #modsecurity #PoC #web server
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Fri, 23 May 2025 00:27:36 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability #apache #CVE_2025_47947 #dos #Json #modsecurity #PoC #web server
Daily CyberSecurity
ModSecurity DoS Flaw: PoC Available for Apache Vulnerability (No Workaround, Patch Pending)
A high-severity flaw (CVE-2025-47947) in ModSecurity's Apache module allows DoS via JSON. PoC exists, no workaround, and a patch is expected soon.
β€· Title: ModSecurity Alert: New DoS Vulnerability Discovered!
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 02 Jun 2025 23:45:49 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability #Denial of Service #dos #modsecurity #open_source #security advisory #waf #Web Security
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 02 Jun 2025 23:45:49 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability #Denial of Service #dos #modsecurity #open_source #security advisory #waf #Web Security
Daily CyberSecurity
ModSecurity Alert: New DoS Vulnerability Discovered!
The ModSecurity project has issued a security advisory disclosing a new vulnerabilityβCVE-2025-48866βin its widely used open-source web application firewall (WAF) engine. The flaw, rated 7.5 on thβ¦
β€· Title: Building a Containerized Web Application Firewall (WAF) with ModSecurity and NGINX Using Docker
ββββββββββββββββββββββββ
πͺ Author: Yash Patel
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 16 Jun 2025 12:25:20 GMT
ββββββββββββββββββββββββ
β Tags: #docker #modsecurity #devsecops #devops #cybersecurity
ββββββββββββββββββββββββ
πͺ Author: Yash Patel
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 16 Jun 2025 12:25:20 GMT
ββββββββββββββββββββββββ
β Tags: #docker #modsecurity #devsecops #devops #cybersecurity
Medium
Building a Containerized Web Application Firewall (WAF) with ModSecurity and NGINX Using Docker
Introduction: Why Every Developer Should Care About Web Application Firewalls
β€· Title: WAFs Wide Open: Critical OWASP CRS Flaw Bypasses Filters
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 12 Jan 2026 03:16:33 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability #Coraza #Cross_Site Scripting (XSS) #modsecurity #OWASP CRS #Rule 922110 #WAF Bypass #web application security
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 12 Jan 2026 03:16:33 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability #Coraza #Cross_Site Scripting (XSS) #modsecurity #OWASP CRS #Rule 922110 #WAF Bypass #web application security
Daily CyberSecurity
WAFs Wide Open: Critical OWASP CRS Flaw Bypasses Filters
A foundational pillar of web application security has cracked. The OWASP Core Rule Set (CRS) team has disclosed a critical security bypass vulnerability that renders one of its key defenses ineffeβ¦
β€· Title: Web Server Hardening Report: Nginx & ModSecurity WAF
ββββββββββββββββββββββββ
πͺ Author: Karim roshdy
ββββββββββββββββββββββββ
β΄΅ Time: Wed, 11 Feb 2026 17:54:48 GMT
ββββββββββββββββββββββββ
β Tags: #nginx #detecting_web_attacks #sql_injection #modsecurity #waf
ββββββββββββββββββββββββ
πͺ Author: Karim roshdy
ββββββββββββββββββββββββ
β΄΅ Time: Wed, 11 Feb 2026 17:54:48 GMT
ββββββββββββββββββββββββ
β Tags: #nginx #detecting_web_attacks #sql_injection #modsecurity #waf
Medium
Web Server Hardening Report: Nginx & ModSecurity WAF
Objective: Proof of Concept (POC) demonstrating the mitigation of web attacks using a Web Application Firewall (WAF).
β€· Title: Crashing the Shield: The One-Line Script Taking Down ModSecurity v3 WAFs
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Fri, 01 May 2026 12:45:10 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #CVE_2026_30923 #CVE_2026_42268 #cybersecurity #Denial of Service #infosec #libmodsecurity3 #Linux Security #modsecurity #Patch Alert #waf #WAF Bypass #Web Security
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Fri, 01 May 2026 12:45:10 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #CVE_2026_30923 #CVE_2026_42268 #cybersecurity #Denial of Service #infosec #libmodsecurity3 #Linux Security #modsecurity #Patch Alert #waf #WAF Bypass #Web Security
Daily CyberSecurity
Crashing the Shield: The One-Line Script Taking Down ModSecurity v3 WAFs
libmodsecurity3 faces critical 8.2 & 7.5 CVSS flaws. A simple one-line script can crash WAF worker processes. Protect your server by upgrading to v3.0.15 now.
β€· Title: ModSecurity Vulnerabilities Let Attackers Bypass WAF Rules
ββββββββββββββββββββββββ
πͺ Author: Do Son
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 06 Jul 2026 00:37:10 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #CVE_2026_52747 #CVE_2026_52761 #libmodsecurity #modsecurity #OWASP ModSecurity #waf #WAF Bypass #Web Application Firewall
ββββββββββββββββββββββββ
πͺ Author: Do Son
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 06 Jul 2026 00:37:10 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #CVE_2026_52747 #CVE_2026_52761 #libmodsecurity #modsecurity #OWASP ModSecurity #waf #WAF Bypass #Web Application Firewall
Daily CyberSecurity
ModSecurity Vulnerabilities Let Attackers Bypass WAF Rules
TL;DR The OWASP ModSecurity team patched two ModSecurity vulnerabilities in version 3.0.16. Both let attackers slip payloads past WAF rules. Neither causes memory corruption or crashes. No exploitβ¦