Lucene search
+L

7894 matches found

Kitploit
Kitploit
•added 2026/09/27 10:25 a.m.•10 views

CVE-2017-7529

CVE-2017-7529 Description Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request. Source:...

7.5CVSS6.8AI score0.62597EPSS
SaveExploits6
Kitploit
Kitploit
•added 2026/09/27 9:54 a.m.•11 views

CVE-2025-0108

CVE-2025-0108 — WebSecurity PoC & Fix This repository contains a small lab environment for reproducing and mitigating the CVE-2025-0108 issue path confusion / header smuggling between Nginx and Apache. The goal of the assignment is to demonstrate how double-encoded requests can bypass...

9.1CVSS8.3AI score0.98455EPSS
SaveExploits8
Kitploit
Kitploit
•added 2026/09/27 9:52 a.m.•10 views

ai-vuln-rediscovery-nginx-cve-2026-42945

AI-Assisted Rediscovery of CVE-2026-42945 in nginx This repository documents a reproducible AI-assisted vulnerability rediscovery experiment against nginx ngxhttprewritemodule, later associated with CVE-2026-42945. The experiment is intentionally narrow. The vulnerable file,...

9.2CVSS7.9AI score0.03396EPSS
SaveExploits42
Kitploit
Kitploit
•added 2026/09/27 9:12 a.m.•8 views

CVE-2022-41741-742-Nginx-Vulnerability-Scanner

🛡️ Nginx Vulnerability Scanner Developed by m10sec. This script automatically detects the Nginx version on a remote server and evaluates whether it is vulnerable to known security flaws, specifically: CVE-2023-44487 – HTTP/2 Rapid Reset Attack CVE-2022-41741 – Memory corruption in ngxhttpmp4module...

7.8CVSS7.4AI score0.01143EPSS
SaveExploits2References1
Kitploit
Kitploit
•added 2026/09/27 8:14 a.m.•9 views

cve-2026-42945

CVE-2026-42945 — NGINX Rewrite Heap Overrun: Analysis, DoS & Credited RCE Port Security research on CVE-2026-42945 CVSS 4.0 9.2 CRITICAL: a heap buffer overrun in NGINX's script engine where a rewrite with arguments in the replacement e.g. rewrite ^. /new?c=1; leaves the engine's isargs flag set...

9.2CVSS8AI score0.03396EPSS
SaveExploits42
Kitploit
Kitploit
•added 2026/09/27 7:45 a.m.•18 views

GPEWebDefender

GPEWebDefender A web-attack monitor. It sits next to nginx / Caddy / the app, tails access logs, and tells you when a site is being probed or exploited. If this process dies, the site keeps serving. It is not Wazuh, not OSSEC, and not a WAF. The command is gpewebdefender. Hosts, tokens, map pins,...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/27 7:43 a.m.•11 views

cve-2024-7646

CVE-2024-7646 Descripción Por defecto, nginx.ingress.kubernetes.io/server-snippet está deshabilitado, pero debido a este CVE, nginx.ingress.kubernetes.io/auth-tls-verify-client puede aún insertar fragmentos personalizados, o incluso se puede incluir código lua. Versión corregida controlador...

8.8CVSS8.7AI score0.27018EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/27 6:01 a.m.•10 views

CVE-2023-5044

CVE-2023-5044 Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation Firstly, you need deploy Pod & Service: root@kitploit: kind: Pod apiVersion: v1 metadata: name: apple-app labels: app: apple spec: containers: - name: apple-app image: hashicorp/http-echo args: -...

8.8CVSS8AI score0.56605EPSS
SaveExploits2References1
Kitploit
Kitploit
•added 2026/09/27 4:24 a.m.•16 views

CVE-2026-42945

NGINX CVE-2026-42945 Rift — local defensive lab Two Dockerized NGINX instances: pattern-based “risky rewrite” snippet vs remediated named-capture snippet, pinned to nginx:1.30.0-alpine / nginx:1.30.1-alpine. Scripts run benign curls, dump nginx -T, and archive evidence. For configuration review...

9.2CVSS7.8AI score0.03396EPSS
SaveExploits42References1
Nuclei
Nuclei
•added 2026/09/27 2:09 a.m.•63 views

Ingress-Nginx Controller - Configuration Injection via Unsanitized `auth-tls-match-cn` Annotation

A security issue was discovered in ingress-nginx https-//github.com/kubernetes/ingress-nginx where the auth-tls-match-cn Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of...

8.8CVSS7.1AI score0.33236EPSS
SaveExploits7References3
Kitploit
Kitploit
•added 2026/09/26 11:59 p.m.•9 views

CVE-2025-1974

cve-2025-1974-win11-attack-defense-lab Windows 11-first educational repository for studying CVE-2025-1974 in a safe, non-weaponized ATTACK + DEFENSE lab. The project is designed for university coursework, team demos, and report-ready screenshots. It emphasizes clean-room implementation, local-onl...

9.8CVSS7.2AI score0.99384EPSS
SaveExploits20
Kitploit
Kitploit
•added 2026/09/26 10:47 p.m.•11 views

CVE-2023-20198

CVE-2023-20198 Exploit PoC for CVE-2023-20198 Description CVE-2023-20198 is characterized by improper path validation to bypass Nginx filtering to reach the webuiwsmahttp web endpoint without requiring authentication. By bypassing authentication to the endpoint, an attacker can execute arbitrary...

10CVSS8.4AI score0.99571EPSS
SaveExploits27
Kitploit
Kitploit
•added 2026/09/26 10:37 p.m.•10 views

CVE-2025-1974

DEMO https://youtu.be/3hYlHeaf2mQ What is CVE-2025-1974? CVE-2025-1974 IngressNightmare is a critical CVSS 9.8 unauthenticated Remote Code Execution vulnerability in the Kubernetes ingress-nginx admission controller. Attack Flow: 1. Upload : Send malicious shared library .so file to NGINX via HTT...

9.8CVSS7.7AI score0.99384EPSS
SaveExploits20
Kitploit
Kitploit
•added 2026/09/26 10:35 p.m.•11 views

EXP-CVE-2017-75

EXP-CVE-2017-75 This Python script is designed to check for and exploit a specific vulnerability in NGINX servers referred to as CVE-2017-75. This was developed for a public vulnerability disclosure program, I recently submitted a report to. It uses a crafted Range header to potentially trigger a...

6.2AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/26 9:43 p.m.•12 views

CVE-2025-1974

Exploit for Ingress NGINX - IngressNightmare This project provides an exploit targeting critical unauthenticated Remote Code Execution RCE vulnerabilities in the Ingress NGINX Controller for Kubernetes, collectively referred to as IngressNightmare. In the original research, the Wiz team did not...

9.8CVSS7.2AI score0.99384EPSS
SaveExploits20
Kitploit
Kitploit
•added 2026/09/26 8:26 p.m.•13 views

CVE-2026-3288

CVE-2026-3288: ingress-nginx Configuration Injection via rewrite-target Annotation Keywords: CVE-2026-3288, ingress-nginx vulnerability, Kubernetes security, nginx configuration injection, rewrite-target annotation, RCE, Secret disclosure, CWE-20, CAPEC-176, ingress-nginx CVE 2026, Kubernetes...

8.8CVSS7.8AI score0.00713EPSS
SaveExploits1References1
Chainguard
Chainguard
•added 2026/09/26 2:54 p.m.•13 views

CVE-2026-90439 vulnerabilities

Vulnerabilities for packages: nginx-stable...

6.9CVSS5.8AI score0.00425EPSS
SaveExploits0
Chainguard
Chainguard
•added 2026/09/26 2:54 p.m.•13 views

GHSA-FJGW-PMCM-G7J7 vulnerabilities

Vulnerabilities for packages: nginx-stable...

5.7AI score
SaveExploits0
Wolfi
Wolfi
•added 2026/09/26 2:53 p.m.•11 views

CVE-2026-90439 vulnerabilities

Vulnerabilities for packages: nginx-stable...

6.9CVSS5.8AI score0.00425EPSS
SaveExploits0
Wolfi
Wolfi
•added 2026/09/26 2:53 p.m.•10 views

GHSA-FJGW-PMCM-G7J7 vulnerabilities

Vulnerabilities for packages: nginx-stable...

5.7AI score
SaveExploits0
Rows per page
Query Builder