Lucene search
+L

34 matches found

Kitploit
Kitploit
added 2026/09/06 12:55 p.m.6 views

CVE-2026-42945-POC

CVE-2026-42945 NGINX Rift — Эксплойт для HTB Автономный эксплойт для уязвимости переполнения кучи NGINX, обнаруженной в 2024 году. Эта версия оптимизирована для окружений HackTheBox и CTF, где невозможно настроить Docker-контейнеры. Детали уязвимости CVE-2026-42945 — это критическое переполнение...

9.2CVSS7.5AI score0.68047EPSS
SaveExploits42References1
Kitploit
Kitploit
added 2026/09/06 9:51 a.m.6 views

ai-vuln-rediscovery-nginx-cve-2026-42945

nginx에서 CVE-2026-42945의 AI 지원 재발견 이 저장소는 nginx ngxhttprewritemodule에 대한 재현 가능한 AI 지원 취약점 재발견 실험을 문서화하며, 이후 CVE-2026-42945와 연결되었습니다. 실험은 의도적으로 범위를 좁혔습니다. 취약한 파일인 src/http/ngxhttpscript.c가 모델에 직접 제공되어 감사audit되었습니다. 이는 AI 시스템이 전체 nginx 코드베이스에서 처음부터 자율적으로 문제를 찾았다는 주장이 아닙니다. 요약 감사된 버그는 nginx rewrite 처...

9.2CVSS7.8AI score0.68047EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/09/03 8:08 p.m.3 views

nginx-cve-2026-42945-poc

CVE-2026-42945 — NGINX Rewrite Module ヒープバッファオーバーフロー → RCE RCE 確認済み — ヒープオーバーフロー + GDB プロセス注入により、NGINX / OpenResty のワーカープロセスで任意のコマンドを実行する。 クイックスタート root@kitploit: 一键构建 NGINX 镜像 + 执行 RCE 测试 ./run.sh nginx 一键构建 OpenResty 镜像 + 执行 RCE 测试 ./run.sh openresty 自定义命令 ./run.sh nginx 'cat /etc/passwd'...

9.2CVSS7.8AI score0.68047EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/09/02 11:01 a.m.4 views

CVE-2026-42945

RIFT — 원격 주입 및 결함 트리거 Remote Injection & Fault Trigger 저자: Michael Sanji Winaya Prawiradibrata AI 공동 저자: Varanus — sahabatku NGINX의 ngxhttprewritemodule을 대상으로 하는 힙 버퍼 오버플로우 익스플로잇 프레임워크. 정찰 + 익스플로잇을 하나로 통합한 도구. 외부 의존성 없음. 저장소 내용 파일| 설명 ---|--- rift.py| 메인 도구. 정찰recon과 익스플로잇exploit을 하나의 스크립트로 결합...

9.2CVSS7.8AI score0.68047EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/08/31 7:43 a.m.5 views

Nginx-Rift

NGINX Rift RCE Proof of concept for CVE-2026-42945 , a critical heap buffer overflow in NGINX's ngxhttprewritemodule introduced in 2008. The bug enables unauthenticated remote code execution against servers using rewrite and set directives. This vulnerability — along with three other memory...

9.2CVSS8.4AI score0.68047EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/08/31 5:12 a.m.3 views

CVE-2026-42945

CVE-2026-42945 — NGINX Rift NGINXngxhttprewritemodule におけるヒープバッファオーバーフロー...

9.2CVSS7.6AI score0.68047EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/08/31 12:39 a.m.5 views

CVE-2026-42945

CVE-2026-42945 - NGINX Rift 취약점 분석 및 재현 개요 CVE-2026-42945코드명 "NGINX Rift"는 NGINX ngxhttprewritemodule에 존재하는 힙 버퍼 오버플로 취약점으로, CVSS v4 점수 9.2Critical입니다. 이 취약점은 depthfirst 보안 연구팀이 2026년 4월에 발견했으며, 2008년 NGINX 0.6.27 버전에서 도입된 후 18년 동안 잠복했습니다. 영향 범위 NGINX Open Source 0.6.27 1.30.0 NGINX Plus R32 R36...

9.2CVSS7.8AI score0.68047EPSS
SaveExploits42
Tenable Nessus
Tenable Nessus
added 2026/07/06 12:00 a.m.16 views

MiracleLinux 8 : nginx:1.24 (AXSA:2026-1164:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1164:01 advisory. nginx: ngxhttprewritemodule: code execution and denial of service CVE-2026-9256 Tenable has extracted the preceding description block directly from the...

9.2CVSS6.5AI score0.10856EPSS
SaveExploits4References2
Redos
Redos
added 2026/06/26 12:00 a.m.22 views

ROS-20260626-73-0020

The vulnerability of the ngxhttprewritemodule module in NGINX Plus and NGINX Open Source web servers is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a denial-of-service attack by sending a specially crafte...

9.2CVSS6.3AI score0.10856EPSS
SaveExploits4
Tenable Nessus
Tenable Nessus
added 2026/06/26 12:00 a.m.16 views

RockyLinux 10 : nginx (RLSA-2026:29874)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:29874 advisory. nginx: ngxhttprewritemodule: code execution and denial of service CVE-2026-9256 Tenable has extracted the preceding description block directly from the RockyLin...

9.2CVSS6.3AI score0.10856EPSS
SaveExploits4References3
RedHat Linux
RedHat Linux
added 2026/06/24 1:25 p.m.112 views

nginx: ngx_http_rewrite_module: code execution and denial of service

A flaw was found in the ngxhttprewritemodule module of NGINX. When a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression PCRE captures and a replacement string that references multiple such captures in a redirect or arguments context, an...

9.2CVSS6.6AI score0.10856EPSS
SaveExploits4References5
GithubExploit
GithubExploit
added 2026/06/09 11:17 a.m.112 views

Exploit for CVE-2026-42945

CVE-2026-42945 - ngxhttprewritemodule module. This vulnerab...

9.2CVSS6.5AI score0.68047EPSS
SaveExploits42
Redos
Redos
added 2026/06/09 12:00 a.m.24 views

ROS-20260609-73-0014

The vulnerability of the ngxhttprewritemodule module in NGINX Plus and NGINX Open Source web servers is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.2CVSS6.3AI score0.68047EPSS
SaveExploits42
HPE Security Bulletins
HPE Security Bulletins
added 2026/06/09 12:00 a.m.22 views

HPESBNW05064 rev.1 - Status of NGINX ngx_http_rewrite_module Vulnerability (CVE-2026-42945) in HPE Aruba Networking Products

Potential Security Impact: Remote: Arbitrary Code Execution, Code Execution, Denial of Service DoS, Unauthorized Code Execution, Unauthorized Execution of Arbitrary Code, Unauthorized Privileged Access, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba AirWave...

9.2CVSS7.1AI score0.68047EPSS
SaveExploits42
Redos
Redos
added 2026/06/09 12:00 a.m.16 views

ROS-20260609-73-0007

The vulnerability of the ngxhttprewritemodule module in NGINX Plus and NGINX Open Source web servers is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a denial-of-service attack by sending a specially crafte...

9.2CVSS6.3AI score0.10856EPSS
SaveExploits4
OSV
OSV
added 2026/06/01 11:47 a.m.38 views

BIT-NGINX-2026-9256 NGINX ngx_http_rewrite_module vulnerability

NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression PCRE captures for example, ^/.$ and a replacement string that references...

9.2CVSS6.2AI score0.10856EPSS
SaveExploits4References16
GithubExploit
GithubExploit
added 2026/05/28 6:56 a.m.237 views

Self-Researched-POC

NGINX ngxhttpr...

9.2CVSS6AI score0.10856EPSS
SaveExploits4
SUSE CVE
SUSE CVE
added 2026/05/23 1:30 a.m.41 views

SUSE CVE-2026-9256

NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression PCRE captures for example, ^/.$ and a replacement string that references...

8.1CVSS6.2AI score0.10856EPSS
SaveExploits4References11
OSV
OSV
added 2026/05/22 3:16 p.m.19 views

CVE-2026-9256

NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression PCRE captures for example, ^/.$ and a replacement string that references...

9.2CVSS7.6AI score
SaveExploits0References15
Vulnrichment
Vulnrichment
added 2026/05/22 2:11 p.m.14 views

CVE-2026-9256 NGINX ngx_http_rewrite_module vulnerability

NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression PCRE captures for example, ^/.$ and a replacement string that references...

9.2CVSS6.2AI score0.10856EPSS
SaveExploits4References1
Rows per page
Query Builder