NGINX_RIFT_SCAN_CVE_2026_42945

NGINX Rift Config Scanner Language: 中文 | English This is a lightweight scanner for checking whether an NGINX configuration contains risky CVE-2026-42945, also known as NGINX Rift, and CVE-2026-9256 configuration patterns. The issue was disclosed by depthfirst in NGINX Rift: Achieving NGINX RCE vi...

NGINX-ngx_http_rewrite_module-heap-buffer-overflow-CVE-2026-9256

CVE-2026-9256 NGINX ngxhttprewritemodule PoC: выводы и размышления Область применения: только для локальных полигонов, авторизованных сред воспроизведения, проверки уязвимостей и анализа защитных правил. Не используйте на неавторизованных целях. Идеи PoC в этом документе проверяют только удаленно...

nginxrift-CVE-2026-42945

NGINX Rift RCE Exploit CVE-2026-42945 de @DepthFirstDisclosures Una herramienta profesional de Prueba de Concepto PoC para investigar e identificar la vulnerabilidad NGINX Rift, un desbordamiento crítico de búfer en el heap en ngxhttprewritemodule. Resumen de la Vulnerabilidad ID CVE:...

CVE-2026-42945

CVE-2026-42945 Sicherheitserkennungstool Dies ist ein statisches Erkennungstool für CVE-2026-42945 für Verteidigung und interne Netzwerkprüfung, das NGINX-ngxhttprewritemodule-bezogene Konfigurationen auf risikoreiche Rewrite-Kombinationen prüft. Dieses Projekt stellt keinen Exploit-Code bereit,...

log4shell-rex

Log4Shell-Rex La seguente espressione regolare è stata scritta nel tentativo di individuare gli indicatori di uno sfruttamento di Log4Shell CVE-2021-44228 e CVE-2021-45046. Se esegui una versione precedente al 21/12/2021, è fortemente consigliato testare e aggiornare. Ho rimosso alcune stranezze ...

nginx-cve-2026-42945-check

Script di controllo locale per NGINX CVE-2026-42945 Lingue: Cinese | Inglese Questo repository fornisce due script di controllo standalone per verificare localmente su server Linux / Windows se Nginx, OpenResty e Tengine presentano rischi relativi a CVE-2026-42945. Gli script eseguono solo raccol...

CVE-2026-42533

CVE-2026-42533 — Sito di tracciamento della sovrascrittura di cattura nginx map/regex Tracker dello stato delle patch per CVE-2026-42533 , un heap buffer overflow nel motore di valutazione script a due passate di nginx. nginx misura un'espressione stringa in una passata LEN e la scrive in una...

ghostlock-vagrant-box

Testumgebung für vollständige Angriffskette: Nginx RCE → GhostLock LPE Übersicht Dieses Repository stellt eine Vagrant-Umgebung bereit, die eine komplette zweistufige Angriffskette demonstriert. Die Testumgebung richtet automatisch eine isolierte Ubuntu 22.04 LTS -VM ein, die absichtlich so...

CVE-2026-75834 Grav before 2.0.14 Stored XSS via Invalid UTF-8 Byte

Grav before 2.0.14 contains a stored cross-site scripting vulnerability in the Security::detectXss function system/src/Grav/Common/Security.php. All XSS detection patterns use the PCRE /u UTF-8 modifier, so a single invalid UTF-8 byte anywhere in page content causes pregmatch to return false for...

EUVD-2026-45083

Grav before 2.0.4 contains a regular expression denial of service ReDoS vulnerability in the regexreplace filter and function, which are allowlisted in the Twig content sandbox. When Twig processing in page content is enabled security.twigcontent.processenabled: true, disabled by default, an...

Security Bulletin: Vulnerability with the open source Perl Compatible Regular Expression (PCRE) library used in IBM Aspera Shares 1.9.2 and earlier

Question Security Bulletin: Vulnerability with the open source Perl Compatible Regular Expression PCRE library used in IBM Aspera Shares 1.9.2 and earlier "Business Unit":"code":"BU059","label":"IBM Software w/o TPS","Product":"code":"SS8NDZ","label":"IBM...

Security Bulletin: Multiple vulnerabilities Perl Compatible Regular Expression (PCRE) libraries - IBM Aspera Shares Application

Question Security Bulletin: Multiple vulnerabilities with the open source Perl Compatible Regular Expression PCRE libraries used in IBM Aspera Shares Application "Business Unit":"code":"BU059","label":"IBM Software w/o TPS","Product":"code":"SS8NDZ","label":"IBM...

Important: nginx

Issue Overview: NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression PCRE captures for example, ^/.$ and a replacement string...

OESA-2026-2587 nginx security update

NGINX is a free, open-source, high-performance HTTP server and reverse proxy, as well as an IMAP/POP3 proxy server. Security Fixes: NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when a rewrite directive uses a regex pattern wit...

CLSA-2026-1779804603 Fix CVE(s): CVE-2026-9256

SECURITY UPDATE: Heap buffer overflow in ngxhttprewritemodule via overlapping PCRE captures in replacement strings - debian/patches/CVE-2026-9256.patch: recompute buffer length per capture including escaping in ngxhttpscriptregexstartcode to prevent buffer overrun when redirect parameter is used ...

SUSE CVE-2026-9256

NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression PCRE captures for example, ^/.$ and a replacement string that references...

CVE-2026-9256

NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression PCRE captures for example, ^/.$ and a replacement string that references...

CVE-2026-9256

NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression PCRE captures for example, ^/.$ and a replacement string that references...

OESA-2026-2407 nginx security update

NGINX is a free, open-source, high-performance HTTP server and reverse proxy, as well as an IMAP/POP3 proxy server. Security Fixes: NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when the rewrite directive is followed by a...

TencentOS Server 3: nginx:1.24 (TSSA-2026:0338)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0338 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...