nginx-cve-2026-42945

CVE-2026-42945 NGINX Rift — ماسح دفاعي يجب على المؤسسات التي تشغّل NGINX Open Source أو NGINX Plus أو بوابات NGINX/وحدات التحكم ingress/controllers التحقق مما إذا كانت متأثرة بـ CVE-2026-42945 وتطبيق التصحيح أو إعادة الضبط قبل وصول محاولات الاستغلال إلى الحواف الإنتاجية. يوفر هذا المستودع ماسحًا...

fix_nginx_CVE-2013-4547_IB

fixnginxCVE-2013-4547IB...

CVE-2026-49975-HTTP-2-Bomb

أداة فرز وليست استغلالًا لتحديد أسطح الهجوم المعرّضة لـ CVE-2026-49975 — "HTTP/2 Bomb". ⚠️ لا يرسل هذا البرنامج النصي أي حمولات هجومية. فهو يكتفي بإجراء طلبات HTTP عادية ويحلل ترويسات الاستجابة لتحديد المضيفين الذين يستحقون تحققًا يدويًا من الإصدار/التصحيح. حول CVE-2026-49975 تم الإعلان عنها في 3...

CVE-2024-7646

CVE-2024-7646 CVE-2024-7646 का PoC apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: example-ingress annotations: nginx.ingress.kubernetes.io/server-snippet: | addheader X-Pwn-Header "Pwn\r\n HTTP/1.1 200 OK Content-Type: text/html alert'XSS'; --------"; return 200 "PWNed"; spec:...

CVE-2024-46256

CVE-2024-46256 Nginx Proxy Manager RCE Vulnerability Analysis Environment Setup 1. Running Nginx Proxy Manager 2.11.3 Environment docker-compose up -d Or you can use the automated script: python setupenvironment.py 2. Accessing Nginx Proxy Manager URL: http://localhost:81 Complete the initial...

CVE-2025-1974-PoC-exploit

CVE-2025-1974-PoC-exploit Kubernetes Ingress-nginx RCE IngressNightmare ❯ python3 exploit.py http://localhost:8443 "id" ============================================================ CVE-2025-1974 - IngressNightmare Exploit ============================================================ Target:...

CVE-2026-42945_NginxRift

🚀 NGINX Rift PoC Automation — CVE-2026-42945 مشغّل أتمتة PoC لاستغلال RCE في حاويةnginx-rift · التحقق من الهدف ← استغلال بأمر واحد ← شل عكسي تفاعلي أمر واحد ينسّق مسار الاستغلال بالكامل — بدءًا من فحص الحاوية وحتى الوصول إلى شل. ⚠️ تحذير أخلاقي وقانوني هذه الأداة مخصصة فقط لاختبارات الأمان المشروع...

safe-check-CVE-2025-23419

Safe Check CVE-2025-23419 - NGINX mTLS Session Resumption Repository with a safe validation script for CVE-2025-23419 , a vulnerability related to NGINX , mTLS , and TLS session resumption. The script performs a heuristic check to identify possible exposure to the flaw, without executing active...

nginx-cve-2026-42945-check

NGINX CVE-2026-42945 Local Checker Language: 中文 | English This repository provides two standalone local scripts for checking whether a Linux or Windows server has Nginx, OpenResty, or Tengine instances that may be exposed to CVE-2026-42945 related risk. The scripts are read-only. They do not run ...

fix_nginx_cve_2026_42945

NGINX CVE-2026-42945 One-Click Fix Script Automatically detect OS distribution, upgrade NGINX to the fixed version ≥1.30.1, backup configuration, and auto-rollback. Vulnerability Description Vulnerability ID: CVE-2026-42945 Vulnerability Name: NGINX Rift When NGINX processes specific rewrite...

CVE-2026-86826

The BackWPup WordPress plugin before 5.7.7 does not properly restrict web access to the working directory it uses during backup restores, allowing unauthenticated attackers, on webservers that do not honour .htaccess rules such as NGINX, to download the full backup archive database dump and site...

CVE-2026-86826

The BackWPup WordPress plugin, in versions before 5.7.7 , fails to properly restrict web access to the working directory utilized during backup restores. On webservers that do not honor .htaccess rules, such as NGINX , unauthenticated attackers can download full backup archives left behind by int...

EUVD-2026-94747

The BackWPup WordPress plugin before 5.7.7 does not properly restrict web access to the working directory it uses during backup restores, allowing unauthenticated attackers, on webservers that do not honour .htaccess rules such as NGINX, to download the full backup archive database dump and site...

CVE-2026-86826 BackWPup < 5.7.7 - Unauthenticated Sensitive Data Disclosure via Restore Working Directory on NGINX

The BackWPup WordPress plugin before 5.7.7 does not properly restrict web access to the working directory it uses during backup restores, allowing unauthenticated attackers, on webservers that do not honour .htaccess rules such as NGINX, to download the full backup archive database dump and site...

CVE-2026-42945

CVE-2026-42945: NGINX Rift Heap Buffer Overflow Vulnerability Overview CVE-2026-42945 is a critical heap buffer overflow vulnerability in the NGINX server, known as "NGINX Rift". The vulnerability exists in the processing logic of the rewrite and set directives in NGINX. When specific configurati...

alpr-dashboard-patches

ALPR Dashboard runtime patches Two drop-in patches for the algertc/alpr-dashboard Docker project. Both are deployable without modifying or rebuilding the upstream image. What's here logger-fix/ — async logger + cleanup throttle Replaces the built-in sync log transport full-file read + rewrite on...

Xiaomi Mi WiFi R3G Routers - Local file Inclusion

Xiaomi Mi WiFi R3G devices before 2.28.23-stable are susceptible to local file inclusion vulnerabilities via a misconfigured NGINX alias, as demonstrated by api-third-party/download/extdisks../etc/config/account. With this vulnerability, the attacker can bypass authentication. id: CVE-2019-18371...

PT-2026-107843

The BackWPup WordPress plugin before 5.7.7 does not properly restrict web access to the working directory it uses during backup restores, allowing unauthenticated attackers, on webservers that do not honour .htaccess rules such as NGINX, to download the full backup archive database dump and site...

nginx: Fix of 5 CVEs

CVE-2026-27651: properly clear s-passwd in mail auth http requests to fix a null pointer dereference on CRAM-MD5/APOP retry - CVE-2026-27654: validate the Destination length for Dav COPY and MOVE to prevent an integer underflow and heap buffer overwrite when alias is used - CVE-2026-27654: also...

CVE-2021-23394

elFinder CVE-2021-23394 Reproduction Setup This repository contains a reproduction setup for CVE-2021-23394 Arbitrary File Execution in elFinder using Docker. It sets up four environments to compare vulnerable and patched versions across Apache and Nginx. Overview The setup includes: 1. Apache...