Everything Threat Times has reported about 0xJacky: 7 stories, newest first. Part of our Vulnerabilities coverage.
A flaw in Nginx UI versions 2.0.0 through 2.5.0 exposes the master node secret in HTTP logs and URLs, enabling attackers to bypass authentication and gain persistent administrative access.
A flaw in Nginx UI allows password-only login for passkey-protected accounts, bypassing second-factor authentication in versions prior to 2.5.0.
A cross-site request forgery vulnerability in Nginx UI versions prior to 2.5.0 allows attackers to modify server configurations and trigger reloads.
A high-severity vulnerability in Nginx UI allows authenticated users to write arbitrary files to the live Nginx configuration directory through crafted backup archives.
A high-severity flaw in Nginx UI allows authenticated users to steal node tokens and bypass cluster authentication, exposing management operations.
An incomplete security patch in Nginx UI allows attackers with a stolen JWT to manage cluster nodes and restart servers without secondary authentication.
Researchers disclosed a critical vulnerability in Nginx UI versions 2.3.8 through 2.5.0 that enables remote code execution via backup restoration.