41 matches found
CVE-2026-42945-POC
CVE-2026-42945 NGINX Rift - 适用于HTB的利用脚本 针对2024年发现的NGINX堆缓冲区溢出漏洞的独立利用脚本。此版本针对HackTheBox和CTF环境进行了优化，这些环境下无法设置Docker容器。 漏洞详情 CVE-2026-42945 是 NGINX 的 ngxhttprewritemodule 中一个严重的堆缓冲区溢出漏洞，自2008年（版本0.6.27）以来一直存在。该漏洞发生在以下情况： 1. rewrite 指令的替换参数中包含 ?（设置 isargs = 1） 2. set 指令捕获 URI 的一部分 3. 长度计算在清零的子引擎上执行（看...
ai-vuln-rediscovery-nginx-cve-2026-42945
AI-Assisted Rediscovery of CVE-2026-42945 in nginx This repository documents a reproducible AI-assisted vulnerability rediscovery experiment against nginx ngxhttprewritemodule, later associated with CVE-2026-42945. The experiment is intentionally narrow. The vulnerable file,...
nginx-cve-2026-42945-poc
CVE-2026-42945 — NGINX Rewrite Module 堆缓冲区溢出 → RCE RCE 已确认成功 — 通过堆溢出 + GDB 进程注入，在 NGINX / OpenResty worker 进程中执行任意命令。 快速开始 root@kitploit: 一键构建 NGINX 镜像 + 执行 RCE 测试 ./run.sh nginx 一键构建 OpenResty 镜像 + 执行 RCE 测试 ./run.sh openresty 自定义命令 ./run.sh nginx 'cat /etc/passwd' ./run.sh openresty 'whoami' 漏洞...
CVE-2026-42945
RIFT — 远程注入与故障触发 作者： Michael Sanji Winaya Prawiradibrata AI 合著者： Varanus — sahabatku 针对 NGINX 的 ngxhttprewritemodule 的堆缓冲区溢出利用框架。 一个集侦察与利用于一体的工具。零外部依赖。 仓库内容 文件| 描述 ---|--- rift.py| 主工具。 侦察与利用合并在一个脚本中（1026 行）。 README.md| 本文档。 运行要求 Python 3.6+（仅标准库 — 无需 pip、无需 venv、无依赖项 ） 快速上手 root@kitploit: 1. 全面侦...
Nginx-Rift
NGINX Rift Prueba de concepto de RCE para CVE-2026-42945 , un desbordamiento crítico de búfer en el montón en el módulo ngxhttprewritemodule de NGINX introducido en 2008. El error permite la ejecución remota de código no autenticada contra servidores que utilizan las directivas rewrite y set. Est...
CVE-2026-42945
CVE-2026-42945 — NGINX Rift NGINXngxhttprewritemodule 中的堆缓冲区溢出...
CVE-2026-42945
CVE-2026-42945 - NGINX Rift 漏洞分析与复现 概述 CVE-2026-42945（代号 "NGINX Rift"）是一个存在于 NGINX ngxhttprewritemodule 中的堆缓冲区溢出 漏洞，CVSS v4 评分 9.2（Critical） 。 该漏洞由 depthfirst 安全研究团队于 2026 年 4 月发现，自 2008 年引入 NGINX 0.6.27 版本以来已潜伏 18 年 。 影响范围 NGINX Open Source 0.6.27 1.30.0 NGINX Plus R32 R36 NGINX Instance Manager...
MiracleLinux 8 : nginx:1.24 (AXSA:2026-1164:01)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1164:01 advisory. nginx: ngxhttprewritemodule: code execution and denial of service CVE-2026-9256 Tenable has extracted the preceding description block directly from the...
RockyLinux 10 : nginx (RLSA-2026:29874)
The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:29874 advisory. nginx: ngxhttprewritemodule: code execution and denial of service CVE-2026-9256 Tenable has extracted the preceding description block directly from the RockyLin...
ROS-20260626-73-0020
The vulnerability of the ngxhttprewritemodule module in NGINX Plus and NGINX Open Source web servers is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a denial-of-service attack by sending a specially crafte...
nginx: ngx_http_rewrite_module: code execution and denial of service
A flaw was found in the ngxhttprewritemodule module of NGINX. When a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression PCRE captures and a replacement string that references multiple such captures in a redirect or arguments context, an...
Exploit for CVE-2026-42945
CVE-2026-42945 - ngxhttprewritemodule module. This vulnerab...
ROS-20260609-73-0014
The vulnerability of the ngxhttprewritemodule module in NGINX Plus and NGINX Open Source web servers is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
HPESBNW05064 rev.1 - Status of NGINX ngx_http_rewrite_module Vulnerability (CVE-2026-42945) in HPE Aruba Networking Products
Potential Security Impact: Remote: Arbitrary Code Execution, Code Execution, Denial of Service DoS, Unauthorized Code Execution, Unauthorized Execution of Arbitrary Code, Unauthorized Privileged Access, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba AirWave...
ROS-20260609-73-0007
The vulnerability of the ngxhttprewritemodule module in NGINX Plus and NGINX Open Source web servers is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a denial-of-service attack by sending a specially crafte...
BIT-NGINX-2026-9256 NGINX ngx_http_rewrite_module vulnerability
NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression PCRE captures for example, ^/.$ and a replacement string that references...
Exploit for CVE-2026-9256
It should be noted that the /api route used by default in the Po...
Self-Researched-POC
NGINX ngxhttpr...
CLSA-2026-1779804603 Fix CVE(s): CVE-2026-9256
SECURITY UPDATE: Heap buffer overflow in ngxhttprewritemodule via overlapping PCRE captures in replacement strings - debian/patches/CVE-2026-9256.patch: recompute buffer length per capture including escaping in ngxhttpscriptregexstartcode to prevent buffer overrun when redirect parameter is used ...