CVE-2026-42945-NGINX-Rift-Toolkit

CVE-2026-42945 Nginx Rift 脆弱性ツールキット CVE-2026-42945（nginx の重大な RCE 脆弱性）をスキャン、パッチ適用、テストするための包括的ツールキット 目次 概要 CVE 詳細 機能 ツールキット構成要素 要件 インストール 使用方法 ワークフロー例 セキュリティ上の考慮事項 トラブルシューティング 貢献 概要 このツールキットは、CVE-2026-42945（nginx の重大なリモートコード実行（RCE）脆弱性 ）をスキャン、パッチ適用、テストするための包括的ツールを提供します。この脆弱性は、メインライン版 1.26.3 未満および安定...

InfectPE

このツールを使用すると、x-code/シェルコードをPEファイルに注入できます。 InjectPEは32ビットの実行可能ファイルでのみ動作します。 InjectPEが必要な理由 セキュリティ製品をテストできます。 フィッシングキャンペーンで使用できます。 PEインジェクションの仕組みを学習できます。 …などなど。 プロジェクトにはMessageBoxAのハードコードされたx-codeが含まれています。変更可能です。 ダウンロード Windows x86 バイナリ - デモ専用のハードコードされたMessageBoxA x-code。 依存関係: vcredist.x86 -...

CVE-2024-8381

CVE-2024-8381 SpiderMonkeyインタプリタの型混乱バグ。 このリポジトリには、根本原因、PoC、エクスプロイトを含む、マークダウン形式とスライド形式の分析が含まれています。 残念ながら、このバグの性質上、エクスプロイトはASLRが無効の場合にのみ適用可能です 。 スライド: Slides.pdf 分析: Analysis.md デモ 再現情報 OS: Ubuntu 24.04 GLIBC: Ubuntu GLIBC 2.39-0ubuntu8.3 Clang: version 18.1.7...

skeleton

Skeleton（ペロトンと同じ発音） Peloton Bike の CVE-2021-0326 に対する Zero-Click RCE エクスプロイト そして、パッチが適用されていない他のすべての Android デバイスにも対応 PoC では ASLR を無効にする必要があります。 関連ブログ記事: https://www.nowsecure.com/blog/2022/02/09/a-zero-click-rce-exploit-for-the-peloton-bike-and-also-every-other-unpatched-android-device/...

PT-2026-64175

The affected product is vulnerable to a heap-based buffer overflow via a crafted MMS Initiate request. Remote code execution RCE has been demonstrated when ASLR is disabled; memory corruption or denial of service may occur in configurations where ASLR is enabled...

CVE-2026-42533

A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a non-cacheable variable i...

OESA-2026-2799 nginx security update

NGINX is a free, open-source, high-performance HTTP server and reverse proxy, as well as an IMAP/POP3 proxy server. Security Fixes: NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpproxyv2module and ngxhttpgrpcmodule modules. This vulnerability exists when the proxyhttpversion ...

BIT-NGINX-2026-42530 NGINX Open-Source ngx_http_v3_module vulnerability

NGINX Open Source has a vulnerability in the ngxhttpv3module module. When NGINX Open Source is configured to use the HTTP/3 QUIC module, a remote unauthenticated attacker along with conditions beyond their control can use a specially crafted HTTP/3 session to reopen a QPACK encoder stream. This m...

CVE-2026-42530

NGINX Open Source has a vulnerability in the ngxhttpv3module module. When NGINX Open Source is configured to use the HTTP/3 QUIC module, a remote unauthenticated attacker along with conditions beyond their control can use a specially crafted HTTP/3 session to reopen a QPACK encoder stream. This m...

DEBIAN-CVE-2026-42055

NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpproxyv2module and ngxhttpgrpcmodule modules. This vulnerability exists when the proxyhttpversion to 2 or grpcpass directives are used to proxy HTTP/2 traffic, the ignoreinvalidheaders directive is set to off, and the...

DEBIAN-CVE-2026-42530

NGINX Open Source has a vulnerability in the ngxhttpv3module module. When NGINX Open Source is configured to use the HTTP/3 QUIC module, a remote unauthenticated attacker along with conditions beyond their control can use a specially crafted HTTP/3 session to reopen a QPACK encoder stream. This m...

CVE-2026-42055

NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpproxyv2module and ngxhttpgrpcmodule modules. This vulnerability exists when the proxyhttpversion to 2 or grpcpass directives are used to proxy HTTP/2 traffic, the ignoreinvalidheaders directive is set to off, and the...

PT-2026-50439

Name of the Vulnerable Software and Affected Versions NGINX Open Source versions 1.31.0 through 1.31.1 NGINX Ingress Controller affected versions not specified NGINX Gateway Fabric affected versions not specified NGINX Instance Manager affected versions not specified Description A use-after-free...

nginx 0.6.27 < 1.30.1 ngx_http_rewrite_module Heap Buffer Overflow

The installed version of nginx is 0.6.27 prior to 1.30.1. It is, therefore, affected by the following issue: - NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when the rewrite directive is followed by a rewrite, if, or set...

CVE-2026-9256

NGINX Plus and NGINX Open Source expose a vulnerability in the ngx_http_rewrite_module when a rewrite directive uses distinct, overlapping PCRE captures (e.g., ^/((.*))$) and the replacement references multiple captures (e.g., $1$2) in redirects or arguments. An unauthenticated attacker can send ...

CVE-2026-9256 NGINX ngx_http_rewrite_module vulnerability

NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression PCRE captures for example, ^/.$ and a replacement string that references...

OESA-2026-2406 nginx security update

NGINX is a free, open-source, high-performance HTTP server and reverse proxy, as well as an IMAP/POP3 proxy server. Security Fixes: NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when the rewrite directive is followed by a...

CVE-2026-8711

NGINX JavaScript has a vulnerability when the jsfetchproxy directive is configured with at least one client-controlled NGINX variable for example, $http, $arg, $cookie and a location invoking the ngx.fetch operation from NGINX JavaScript. An unauthenticated attacker can exploit this vulnerability...

PT-2026-41939

Name of the Vulnerable Software and Affected Versions NGINX JavaScript affected versions not specified Description An issue exists when the 'js fetch proxy' directive is configured with at least one client-controlled NGINX variable, such as $http , $arg , or $cookie , and a location invokes the...

BIT-NGINX-2026-42945 NGINX ngx_http_rewrite_module vulnerability

NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when the rewrite directive is followed by a rewrite, if, or set directive and an unnamed Perl-Compatible Regular Expression PCRE capture for example, $1, $2 with a replacement strin...