CVE-2019-20372

REFER https://bertjwregeer.keybase.pub/2019-12-10%20-%20errorpage%20request%20smuggling.pdf Chạy Server docker run -it --rm -p 80:80 -v pwd/default.conf:/etc/nginx/conf.d/default.conf nginx:1.17.6 Khai thác printf "GET /a HTTP/1.1\r\nHost: localhost\r\nContent-Length: 56\r\n\r\nGET...

CVE-2022-4174_CVE-2022-41742

CVE-2022-4174CVE-2022-41742 PoC for CVE-2022-4174CVE-2022-41742 to determine if Nginx 1.22.1 is vulnerable [email protected] This PoC allows determining if an Nginx server version 1.22.1 is vulnerable to certain known vulnerabilities, including: CVE-2022-41741 : Memory corruption in the...

EVIL-CVE-2021-23017-Update-2025

vulnerability in NGINX servers versions 0.6.18–1.20.0. The scripts aim to cause a Denial of Service DoS by sending malicious DNS responses, with enhancements to bypass firewalls. This is an improved version of the original PoC from M507/CVE-2021-23017-PoC . Warning : Use only with explicit writte...

docker-tor-hiddenservice-nginx

은닉 서비스를 쉽게 생성하고 실행하기 이 컨테이너로 Tor 네트워크 내에서 은닉 서비스를 쉽게 실행하세요 은닉 서비스의 스켈레톤 구성을 생성합니다. 을 은닉 서비스 패턴 이름으로 바꾸세요. 예를 들어, 은닉 서비스가 'boss'라는 단어를 포함하게 하려면 이 단어를 인수로 사용하세요. 정규 표현식을 사용할 수 있습니다. 예: ^boss는 'boss'로 시작하는 주소를 생성합니다. 패턴이 클수록 생성 시간이 더 오래 걸린다는 점에 유의하세요. root@kitploit: docker run -it --rm -v...

CVE-2021-23017-POC

CVE-2021-23017-POC A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact. The issue only affects nginx if the "resolver"...

nginx-ultimate-bad-bot-blocker

REPO| BECOME A SPONSOR ---|--- | Your logo and link to your domain will appear here if you become a sponsor. Simply email me on [email protected] if you would like to sponsor this project as South Africa is not supported yet under the Github sponsor program. | Help Support Me at...

phuip-fpizdam

PHuiP-FPizdaM What's this This is an exploit for a bug in php-fpm CVE-2019-11043. In certain nginx + php-fpm configurations, the bug is possible to trigger from the outside. This means that a web user may get code execution if you have vulnerable config see below. Writeup While we were too lazy t...

CVE-2019-11043

CVE-2019-11043 0th3rs Security Team ====================== En las versiones de PHP 7.1.x anteriores a 7.1.33, 7.2.x anteriores a 7.2.24 y 7.3.x anteriores a 7.3.11 Probado con PHP 7.2.20/7.3.10 Instrucciones root@kitploit: 1. Relativamente estable, siempre que se obtenga por fuerza bruta la...

nginx-ui-CVE-2026-42221-CVE-2026-42238-

nginx-ui CVE Verification Environment This repository is for actually verifying two CVEs reported for nginx-ui Nginx's Web GUI management tool in a Docker environment. CVE-2026-42221 : Unauthenticated administrator account takeover CVE-2026-42238 : Command execution via unauthenticated backup...

CVE2026-42926

CVE-2026-42926 NGINX HTTP/2 Frame Injection Lab A controlled cybersecurity lab for validating and comparing behavior related to CVE-2026-42926 , an HTTP/2 frame injection issue affecting specific NGINX versions when a vulnerable proxy configuration is used. This repository is intended for defensi...

CVE-2013-2028-Exploit

CVE-2013-2028 Exploit Vulnerability Details Vulnerable software: Nginx 1.3.9 Vulnerable function: ngxhttpparsechunked CVE-2013-2028 is an integer overflow vulnerability in Nginx's HTTP chunked transfer encoding parser. Under the conditions targeted by this laboratory environment, the vulnerabilit...

ROOT-OS-ALPINE-315-CVE-2026-27651 CVE-2026-27651 in nginx - Patched by Root

Root has patched CVE-2026-27651 in the nginx package for Root:Alpine:3.15. Multiple fixed versions available...

ROOT-OS-ALPINE-315-CVE-2026-27654 CVE-2026-27654 in nginx - Patched by Root

Root has patched CVE-2026-27654 in the nginx package for Root:Alpine:3.15. Multiple fixed versions available...

ROOT-OS-ALPINE-315-CVE-2026-32647 CVE-2026-32647 in nginx - Patched by Root

Root has patched CVE-2026-32647 in the nginx package for Root:Alpine:3.15. Multiple fixed versions available...

NGINX-ngx_http_rewrite_module-heap-buffer-overflow-CVE-2026-9256

CVE-2026-9256 NGINX ngxhttprewritemodule PoC Derivation Process and Thoughts Scope: Only for local ranges, authorized reproduction environments, vulnerability verification, and protection rule analysis. Do not use against unauthorized targets. The PoC ideas in this document only verify remotely...

BIT-NGINX-GATEWAY-2026-90439 NGINX ngx_http_v3_module vulnerability

NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpv3module module. When using HTTP/3 with OpenSSL versions = OpenSSL 3.5.0 under certain configurations, a limited heap buffer overflow could happen while processing a TLS handshake. This can happen in a non-deterministic manner th...

BIT-NGINX-2026-90439 NGINX ngx_http_v3_module vulnerability

NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpv3module module. When using HTTP/3 with OpenSSL versions = OpenSSL 3.5.0 under certain configurations, a limited heap buffer overflow could happen while processing a TLS handshake. This can happen in a non-deterministic manner th...

CVE-2026-42533

CVE-2026-42533 — nginx: sobrescritura de captura en dos pasadas two-pass capture clobbering nginx 0.9.6–1.30.3 / mainline ≤1.31.2 desbordamiento de montón preautenticación + fuga de información en el motor de scripts de valores complejos; CVSS 9.2. La misma causa raíz tiene dos superficies de...

CVE-2019-11043-Vulnerability

Colaboradores: Olaf Madejski, Andrew Masone, Nate Desany Demostración de Explotación de Túnel Inverso y Persistencia en PHP-FPM CVE-2019-11043 — Vulnerabilidad de Manejo de Rutas en Debian PHP-FPM Resumen del Proyecto En octubre de 2019, los investigadores del aviso de seguridad de Debian Emil...

CVE-2026-42945

NGINX Rift RCE Proof of concept for CVE-2026-42945 , a critical heap buffer overflow in NGINX's ngxhttprewritemodule introduced in 2008. The bug enables unauthenticated remote code execution against servers using rewrite and set directives. This vulnerability — along with three other memory...