<![CDATA[Oh.]]>Oh.

https://my.f5.com/manage/s/article/K000160932

]]>https://board.circlewithadot.net/topic/8622ddb0-782b-4b2a-8d65-08ac2a57abc9/oh.RSS for NodeFri, 15 May 2026 01:53:27 GMTWed, 13 May 2026 19:09:05 GMT60<![CDATA[Reply to Oh. on Wed, 13 May 2026 20:51:46 GMT]]>@huronbikes @cR0w @cR0w
Isn't Big Ip that one Peter Gabriel song?

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/FritzAdalis/statuses/116569244090940298https://board.circlewithadot.net/post/https://infosec.exchange/users/FritzAdalis/statuses/116569244090940298Wed, 13 May 2026 20:51:46 GMT<![CDATA[Reply to Oh. on Wed, 13 May 2026 20:34:26 GMT]]>@huronbikes @bws @cR0w I've definitely never seen a Server 2012 in production.

Nope.

That would be CRAZY since it's EOL.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/NosirrahSec/statuses/116569175901596486https://board.circlewithadot.net/post/https://infosec.exchange/users/NosirrahSec/statuses/116569175901596486Wed, 13 May 2026 20:34:26 GMT<![CDATA[Reply to Oh. on Wed, 13 May 2026 20:29:48 GMT]]>@eruonna Oof, IDK about that but I get it.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/cR0w/statuses/116569157689923569https://board.circlewithadot.net/post/https://infosec.exchange/users/cR0w/statuses/116569157689923569Wed, 13 May 2026 20:29:48 GMT<![CDATA[Reply to Oh. on Wed, 13 May 2026 20:26:52 GMT]]>@cR0w maybe I should be happy they laid me off last year

]]>https://board.circlewithadot.net/post/https://lgbtqia.space/ap/users/116205631931276462/statuses/116569146133731016https://board.circlewithadot.net/post/https://lgbtqia.space/ap/users/116205631931276462/statuses/116569146133731016Wed, 13 May 2026 20:26:52 GMT<![CDATA[Reply to Oh. on Wed, 13 May 2026 20:20:29 GMT]]>@TomSellers @huronbikes @bws @cR0w don't forget the dozens of OTHER 'nginx controllers' offered various places.

]]>https://board.circlewithadot.net/post/https://weird.autos/users/rootwyrm/statuses/116569121046144102https://board.circlewithadot.net/post/https://weird.autos/users/rootwyrm/statuses/116569121046144102Wed, 13 May 2026 20:20:29 GMT<![CDATA[Reply to Oh. on Wed, 13 May 2026 20:18:43 GMT]]>@TomSellers @bws @cR0w that second one is definitely part of the advisory. Fun will be had by all.

]]>https://board.circlewithadot.net/post/https://cyberplace.social/users/huronbikes/statuses/116569114097624687https://board.circlewithadot.net/post/https://cyberplace.social/users/huronbikes/statuses/116569114097624687Wed, 13 May 2026 20:18:43 GMT<![CDATA[Reply to Oh. on Wed, 13 May 2026 20:16:25 GMT]]>@huronbikes @bws @cR0w

I actually came here to make a joke about that because there are TWO similarly named controllers:

  • Ingress NGINX Controller: deprecated, owned by the K8s project
  • NGINX Ingress Controller: still alive, owned by F5
]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/TomSellers/statuses/116569105047671298https://board.circlewithadot.net/post/https://infosec.exchange/users/TomSellers/statuses/116569105047671298Wed, 13 May 2026 20:16:25 GMT<![CDATA[Reply to Oh. on Wed, 13 May 2026 20:08:55 GMT]]>@bws @cR0w EOL works so well certain former employers are definitely not using Windows Server 2012 in 2026. For critical business functionality. Very often.

]]>https://board.circlewithadot.net/post/https://cyberplace.social/users/huronbikes/statuses/116569075583094200https://board.circlewithadot.net/post/https://cyberplace.social/users/huronbikes/statuses/116569075583094200Wed, 13 May 2026 20:08:55 GMT<![CDATA[Reply to Oh. on Wed, 13 May 2026 20:05:36 GMT]]>@huronbikes @cR0w you mean the ingress controller which is EOL anyway? 😉

]]>https://board.circlewithadot.net/post/https://social.linux.pizza/users/bws/statuses/116569062552665934https://board.circlewithadot.net/post/https://social.linux.pizza/users/bws/statuses/116569062552665934Wed, 13 May 2026 20:05:36 GMT<![CDATA[Reply to Oh. on Wed, 13 May 2026 19:53:46 GMT]]>@cR0w well, it's fine, it's not like NginX is used very much, for everything, all over. Also not like this affected the Kubernetes NginX ingress controller... very much...

]]>https://board.circlewithadot.net/post/https://cyberplace.social/users/huronbikes/statuses/116569016008606858https://board.circlewithadot.net/post/https://cyberplace.social/users/huronbikes/statuses/116569016008606858Wed, 13 May 2026 19:53:46 GMT<![CDATA[Reply to Oh. on Wed, 13 May 2026 19:51:16 GMT]]>@huronbikes It's funny how in software, such small things can be catte-strophic.

Link Preview Image
]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/cR0w/statuses/116569006177086548https://board.circlewithadot.net/post/https://infosec.exchange/users/cR0w/statuses/116569006177086548Wed, 13 May 2026 19:51:16 GMT<![CDATA[Reply to Oh. on Wed, 13 May 2026 19:47:58 GMT]]>@cR0w https://github.com/nginx/nginx/commit/524977e7c534e87e5b55739fa74601c9f1102686 is the commit that addresses the nginx rewrite vuln. It's funny, I was looking for a much more involved piece of code that would address it but looks like it's an issue with properly resetting the state of a custom arg parser.

]]>https://board.circlewithadot.net/post/https://cyberplace.social/users/huronbikes/statuses/116568993213969867https://board.circlewithadot.net/post/https://cyberplace.social/users/huronbikes/statuses/116568993213969867Wed, 13 May 2026 19:47:58 GMT<![CDATA[Reply to Oh. on Wed, 13 May 2026 19:17:46 GMT]]>@huronbikes IDK, I might need @catsalad to confirm that verbiage.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/cR0w/statuses/116568874463293235https://board.circlewithadot.net/post/https://infosec.exchange/users/cR0w/statuses/116568874463293235Wed, 13 May 2026 19:17:46 GMT<![CDATA[Reply to Oh. on Wed, 13 May 2026 19:17:06 GMT]]>@cR0w "that's 6-7 skibbidi bad", as nobody's kids say.

]]>https://board.circlewithadot.net/post/https://cyberplace.social/users/huronbikes/statuses/116568871851908765https://board.circlewithadot.net/post/https://cyberplace.social/users/huronbikes/statuses/116568871851908765Wed, 13 May 2026 19:17:06 GMT<![CDATA[Reply to Oh. on Wed, 13 May 2026 19:15:49 GMT]]>@cR0w oh that's just a little oopsie-doodle that can *adjusts glasses* crash the server or lead to RCE.

]]>https://board.circlewithadot.net/post/https://cyberplace.social/users/huronbikes/statuses/116568866812714290https://board.circlewithadot.net/post/https://cyberplace.social/users/huronbikes/statuses/116568866812714290Wed, 13 May 2026 19:15:49 GMT<![CDATA[Reply to Oh. on Wed, 13 May 2026 19:13:19 GMT]]>@huronbikes Yeah but that NGINX vuln...

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/cR0w/statuses/116568856926569166https://board.circlewithadot.net/post/https://infosec.exchange/users/cR0w/statuses/116568856926569166Wed, 13 May 2026 19:13:19 GMT<![CDATA[Reply to Oh. on Wed, 13 May 2026 19:11:33 GMT]]>@cR0w "the bigger the BIG-IP, the bigger the CVE!" as the old saying goes

]]>https://board.circlewithadot.net/post/https://cyberplace.social/users/huronbikes/statuses/116568850018004727https://board.circlewithadot.net/post/https://cyberplace.social/users/huronbikes/statuses/116568850018004727Wed, 13 May 2026 19:11:33 GMT