CVE-2023-20198

CVE-2023-20198 PoC de exploit para CVE-2023-20198 Descripción CVE-2023-20198 se caracteriza por una validación de ruta incorrecta para eludir el filtrado de Nginx y alcanzar el endpoint web webuiwsmahttp sin requerir autenticación. Al eludir la autenticación en el endpoint, un atacante puede...

CVE-2025-1974

DEMO https://youtu.be/3hYlHeaf2mQ ¿Qué es CVE-2025-1974? CVE-2025-1974 IngressNightmare es una vulnerabilidad crítica CVSS 9.8 de ejecución remota de código no autenticada en el controlador de admisión ingress-nginx de Kubernetes. Flujo de ataque: 1. Subir : Enviar biblioteca compartida maliciosa...

EXP-CVE-2017-75

EXP-CVE-2017-75 Este script de Python está diseñado para verificar y explotar una vulnerabilidad específica en servidores NGINX conocida como CVE-2017-75. Fue desarrollado para un programa público de divulgación de vulnerabilidades, al cual recientemente envié un informe. Utiliza un encabezado...

CVE-2025-1974

Exploit para Ingress NGINX - IngressNightmare Este proyecto proporciona un exploit dirigido a vulnerabilidades críticas de ejecución remota de código RCE no autenticada en el Ingress NGINX Controller para Kubernetes, conocidas colectivamente como IngressNightmare. En la investigación original, el...

CVE-2026-3288

CVE-2026-3288: Inyección de Configuración en ingress-nginx a través de la Anotación rewrite-target Palabras clave: CVE-2026-3288, vulnerabilidad ingress-nginx, seguridad en Kubernetes, inyección de configuración nginx, anotación rewrite-target, RCE, divulgación de Secretos, CWE-20, CAPEC-176,...

CVE-2024-22198_Checker

CVE-2024-22198 - ejecución remota de código autenticado en Nginx-ui Descripción Esta herramienta está diseñada para comprobar de forma remota la versión de Nginx-ui y notificar si es vulnerable a CVE-2024-22198. Nginx-UI es una interfaz web para gestionar configuraciones de Nginx. Es vulnerable a...

CVE-2024-49368

Configuración del Exploit de Nginx UI Esta guía describe los pasos para configurar Nginx UI usando Docker Compose, crear un usuario, ejecutar un exploit y verificar los resultados dentro del contenedor Docker. Requisitos previos Asegúrate de tener Docker y Docker Compose instalados en tu máquina...

CVE-2025-1974

🚨 Prueba de Inyección de Registros a través del Controlador de Admisión de Ingress-NGINX 🧠 Resumen Este script prueba vulnerabilidades de inyección de anotaciones en clústeres de Kubernetes que utilizan el Controlador de Ingress NGINX. Está diseñado solo para fines de detección en relación con...

[SECURITY] Fedora 45 Update: nginx-1.30.5-2.fc45

Nginx is a web server and a reverse proxy server for HTTP, SMTP, POP3 and IMAP protocols, with a strong focus on high concurrency, performance and low memory usage...

BIT-GHOST-2026-25552 Ghost CLI < 1.30.1 IP Spoofing via X-Forwarded-For Header

Ghost CLI before 1.30.1 contains an IP spoofing vulnerability that allows unauthenticated remote attackers to bypass rate-limiting controls by manipulating the X-Forwarded-For header through a misconfigured Nginx configuration. Attackers can append attacker-controlled values to the header chain...

Rocky Linux 8 [CIQ] Security Update: nginx / nginx-all-modules / nginx-debuginfo / nginx-debugsource / etc (crlsa-2026_67315)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202667315 advisory. nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 Tenable has extracted the preceding description block directly from the CIQ securit...

Rocky Linux 9 [CIQ] Security Update: nginx / nginx-all-modules / nginx-core / nginx-core-debuginfo / etc (crlsa-2026_66542)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202666542 advisory. nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 Tenable has extracted the preceding description block directly from the CIQ securit...

Rocky Linux 9 [CIQ] Security Update: nginx / nginx-all-modules / nginx-core / nginx-core-debuginfo / etc (crlsa-2026_67283)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202667283 advisory. nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 Tenable has extracted the preceding description block directly from the CIQ securit...

Rocky Linux 9 [CIQ] Security Update: nginx / nginx-all-modules / nginx-core / nginx-core-debuginfo / etc (crlsa-2026_67308)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202667308 advisory. nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 Tenable has extracted the preceding description block directly from the CIQ securit...

CentOS Linux 7 [TuxCare] Security Update: nginx / nginx-all-modules / nginx-filesystem / nginx-mod-devel / etc (CENTOS7:CLSA-2026:1779736259)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1779736259 advisory. - NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when a rewrite directive us...

AlmaLinux 9.2 [TuxCare] Security Update: nginx / nginx-all-modules / nginx-core / nginx-filesystem / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1777022242)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1777022242 advisory. - When the ngxmailauthhttpmodule module is enabled on NGINX Plus or NGINX Open Source, undisclosed requests can cause worker process...

Rocky Linux 9 [CIQ] Security Update: nginx / nginx-all-modules / nginx-core / nginx-core-debuginfo / etc (crlsa-2026_19372)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202619372 advisory. nginx: NGINX: Arbitrary Code Execution Vulnerability CVE-2026-42945 Tenable has extracted the preceding description block directly from the CIQ security advisory...

CentOS Linux 8 [TuxCare] Security Update: nginx / nginx-all-modules / nginx-filesystem / etc (CENTOS-STREAM8:CLSA-2026:1779892931)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1779892931 advisory. - NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when the rewrite...

Rocky Linux 8 [CIQ] Security Update: nginx / nginx-all-modules / nginx-debuginfo / nginx-debugsource / etc (crlsa-2026_38847)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202638847 advisory. nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers CVE-2026-42055 Bug Fixes and Enhancements:...

AlmaLinux 9.6 [TuxCare] Security Update: nginx / nginx-all-modules / nginx-core / nginx-filesystem / etc (ALMALINUX9.6:CLSA-2026:1773312266)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1773312266 advisory. - A vulnerability exists in NGINX OSS and NGINX Plus when configured to proxy to upstream Transport Layer Security TLS servers. An attacker...