CVE-2026-27654-PoC

CVE-2026-27654 – nginx ngxhttpdavmodule DAV Alias Path Handling PoC This repository provides a proof‑of‑concept exploit for CVE‑2026‑27654 , a heap‑overflow vulnerability in the ngxhttpdavmodule of nginx. The bug arises from a size‑t underflow when handling MOVE/COPY requests with specially craft...

CLSA-2026-1792770638 Fix CVE(s): CVE-2026-15176

SECURITY UPDATE: heap buffer overflow in ngxhttpmapuritopath when $requestfilename is evaluated after a rewrite inside an "alias" location - debian/patches/CVE-2026-15176.patch: reject the URI to path mapping for an "alias" location while r-urichanged is set, and clear r-validlocation in...

Exploit for Heap-based Buffer Overflow in F5 Nginx_Plus

CVE-2026-27654 – nginx ngxhttpdavmodule DAV Alias Path Hand...