Lucene search
+L

41 matches found

Kitploit
Kitploit
added 2026/09/07 5:12 a.m.4 views

CVE-2026-42945

CVE-2026-42945 — NGINX Rift Desbordamiento de búfer en el montón en NGINXngxhttprewritemodule...

9.2CVSS7.6AI score0.68047EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/09/07 1:25 a.m.6 views

CVE-2026-42945-POC

CVE-2026-42945 NGINX Rift - Exploit listo para HTB Exploit independiente para la vulnerabilidad de desbordamiento de búfer en el heap de NGINX descubierta en 2024. Esta versión está optimizada para entornos de HackTheBox y CTF donde no se pueden configurar contenedores Docker. Detalles de la...

9.2CVSS7.8AI score0.68047EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/09/07 12:39 a.m.5 views

CVE-2026-42945

CVE-2026-42945 - Análisis y reproducción de la vulnerabilidad NGINX Rift Resumen CVE-2026-42945 nombre en clave "NGINX Rift" es una vulnerabilidad de desbordamiento de búfer en el montón en ngxhttprewritemodule de NGINX, con una puntuación CVSS v4 de 9.2 Crítica. La vulnerabilidad fue descubierta...

9.2CVSS7.5AI score0.68047EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/09/06 9:51 a.m.6 views

ai-vuln-rediscovery-nginx-cve-2026-42945

Redescubrimiento asistido por IA de CVE-2026-42945 en nginx Este repositorio documenta un experimento reproducible de redescubrimiento de vulnerabilidad asistido por IA contra el módulo ngxhttprewritemodule de nginx, posteriormente asociado con CVE-2026-42945. El experimento es intencionalmente...

9.2CVSS7.8AI score0.68047EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/09/03 8:08 p.m.4 views

nginx-cve-2026-42945-poc

CVE-2026-42945 — NGINX Rewrite Module Heap Buffer Overflow → RCE RCE confirmed successful — via heap overflow + GDB process injection, execute arbitrary commands in NGINX / OpenResty worker processes. Quick Start root@kitploit: One-click build NGINX image + execute RCE test ./run.sh nginx One-cli...

9.2CVSS7.8AI score0.68047EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/09/02 11:01 a.m.4 views

CVE-2026-42945

RIFT — Remote Injection & Fault Trigger Autor: Michael Sanji Winaya Prawiradibrata Co-Autor IA: Varanus — sahabatku Framework de explotación de desbordamiento de búfer de heap dirigido a ngxhttprewritemodule de NGINX. Una sola herramienta para reconocimiento + explotación. Sin dependencias...

9.2CVSS7.8AI score0.68047EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/08/31 7:43 a.m.6 views

Nginx-Rift

NGINX Rift Prueba de concepto de RCE para CVE-2026-42945 , un desbordamiento crítico de búfer en el montón en el módulo ngxhttprewritemodule de NGINX introducido en 2008. El error permite la ejecución remota de código no autenticada contra servidores que utilizan las directivas rewrite y set. Est...

9.2CVSS8.4AI score0.68047EPSS
SaveExploits42
Tenable Nessus
Tenable Nessus
added 2026/07/06 12:00 a.m.16 views

MiracleLinux 8 : nginx:1.24 (AXSA:2026-1164:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1164:01 advisory. nginx: ngxhttprewritemodule: code execution and denial of service CVE-2026-9256 Tenable has extracted the preceding description block directly from the...

9.2CVSS6.5AI score0.10856EPSS
SaveExploits4References2
Redos
Redos
added 2026/06/26 12:00 a.m.22 views

ROS-20260626-73-0020

The vulnerability of the ngxhttprewritemodule module in NGINX Plus and NGINX Open Source web servers is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a denial-of-service attack by sending a specially crafte...

9.2CVSS6.3AI score0.10856EPSS
SaveExploits4
Tenable Nessus
Tenable Nessus
added 2026/06/26 12:00 a.m.16 views

RockyLinux 10 : nginx (RLSA-2026:29874)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:29874 advisory. nginx: ngxhttprewritemodule: code execution and denial of service CVE-2026-9256 Tenable has extracted the preceding description block directly from the RockyLin...

9.2CVSS6.3AI score0.10856EPSS
SaveExploits4References3
RedHat Linux
RedHat Linux
added 2026/06/24 1:25 p.m.113 views

nginx: ngx_http_rewrite_module: code execution and denial of service

A flaw was found in the ngxhttprewritemodule module of NGINX. When a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression PCRE captures and a replacement string that references multiple such captures in a redirect or arguments context, an...

9.2CVSS6.6AI score0.10856EPSS
SaveExploits4References5
GithubExploit
GithubExploit
added 2026/06/09 11:17 a.m.112 views

Exploit for CVE-2026-42945

CVE-2026-42945 - ngxhttprewritemodule module. This vulnerab...

9.2CVSS6.5AI score0.68047EPSS
SaveExploits42
Redos
Redos
added 2026/06/09 12:00 a.m.25 views

ROS-20260609-73-0014

The vulnerability of the ngxhttprewritemodule module in NGINX Plus and NGINX Open Source web servers is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.2CVSS6.3AI score0.68047EPSS
SaveExploits42
Redos
Redos
added 2026/06/09 12:00 a.m.16 views

ROS-20260609-73-0007

The vulnerability of the ngxhttprewritemodule module in NGINX Plus and NGINX Open Source web servers is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a denial-of-service attack by sending a specially crafte...

9.2CVSS6.3AI score0.10856EPSS
SaveExploits4
HPE Security Bulletins
HPE Security Bulletins
added 2026/06/09 12:00 a.m.23 views

HPESBNW05064 rev.1 - Status of NGINX ngx_http_rewrite_module Vulnerability (CVE-2026-42945) in HPE Aruba Networking Products

Potential Security Impact: Remote: Arbitrary Code Execution, Code Execution, Denial of Service DoS, Unauthorized Code Execution, Unauthorized Execution of Arbitrary Code, Unauthorized Privileged Access, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba AirWave...

9.2CVSS7.1AI score0.68047EPSS
SaveExploits42
OSV
OSV
added 2026/06/01 11:47 a.m.39 views

BIT-NGINX-2026-9256 NGINX ngx_http_rewrite_module vulnerability

NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression PCRE captures for example, ^/.$ and a replacement string that references...

9.2CVSS6.2AI score0.10856EPSS
SaveExploits4References16
GithubExploit
GithubExploit
added 2026/05/28 8:22 a.m.285 views

Exploit for CVE-2026-9256

It should be noted that the /api route used by default in the Po...

9.2CVSS5.8AI score0.10856EPSS
SaveExploits4
GithubExploit
GithubExploit
added 2026/05/28 6:56 a.m.237 views

Self-Researched-POC

NGINX ngxhttpr...

9.2CVSS6AI score0.10856EPSS
SaveExploits4
OSV
OSV
added 2026/05/26 2:10 p.m.14 views

CLSA-2026-1779804603 Fix CVE(s): CVE-2026-9256

SECURITY UPDATE: Heap buffer overflow in ngxhttprewritemodule via overlapping PCRE captures in replacement strings - debian/patches/CVE-2026-9256.patch: recompute buffer length per capture including escaping in ngxhttpscriptregexstartcode to prevent buffer overrun when redirect parameter is used ...

9.2CVSS6AI score0.10856EPSS
SaveExploits4References1
GithubExploit
GithubExploit
added 2026/05/25 9:02 a.m.160 views

Exploit for CVE-2026-42945

NGINX Rift — CVE-2026-42945 Vulnerability Scanning and Verific...

9.2CVSS6.2AI score0.68047EPSS
SaveExploits42
Rows per page
Query Builder