Lucene search
+L

7890 matches found

Kitploit
Kitploit
•added 2026/09/24 7:13 p.m.•7 views

CVE-2026-42533

CVE-2026-42533 Lab — NGINX Two-Pass Capture Clobbering RCE CVSS 9.2 Critical — Pre-auth heap buffer overflow + info leak in nginx Affected: nginx 0.9.6 – 1.30.3 / 1.31.2 | Patched: 1.30.4 / 1.31.3 Architecture root@kitploit: ┌─────────────────────────────────────┐ │ Host machine │ │ │ PoC scripts...

9.2CVSS8AI score0.00894EPSS
SaveExploits6
Kitploit
Kitploit
•added 2026/09/24 7:01 p.m.•14 views

HTB-Snapped-Writeup

HTB-Snapped-Writeup HTB Snapped — Hard Linux machine writeup. CVE-2026-27944 Nginx UI unauthenticated backup disclosure chained with CVE-2026-3888 snapd race condition LPE to achieve full system compromise. HTB: Snapped — Writeup Difficulty: Hard OS: Linux Ubuntu 24.04 Release Date: 23 Mar 2026...

9.8CVSS7.9AI score0.01014EPSS
SaveExploits18
Kitploit
Kitploit
•added 2026/09/24 7:01 p.m.•15 views

CVE-2026-27944

CVE-2026-27944 A proof of concept script for CVE-2026-27944, a critical exploit allowing nginx-ui backups to be decrypted DISCLAIMER This Proof of Concept is for educational and ethical security testing purposes only. It was developed to demonstrate the technical root cause of CVE-2026-27944 as...

9.8CVSS8.1AI score0.01014EPSS
SaveExploits13
Kitploit
Kitploit
•added 2026/09/24 6:05 p.m.•13 views

CVE-2023-5043

CVE-2023-5043 Ingress nginx annotation injection causes arbitrary command execution 1. Create Ingress can be created without Service and Pod root@kitploit: apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: ingress-exploit annotations: kubernetes.io/ingress.class: "nginx"...

8.8CVSS8.2AI score0.02234EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/24 5:59 p.m.•13 views

cve-2026-24514-Kubernetes-Dos

CVE-2026-24514 – Critical Memory Exhaustion in ingress-nginx Validating Admission Webhook Unauthenticated / low-privileged remote denial-of-service vulnerability allowing attackers to crash ingress-nginx controller pods via oversized AdmissionReview requests. Overview & Business Impact The...

6.5CVSS7.4AI score0.00488EPSS
SaveExploits1References3
Kitploit
Kitploit
•added 2026/09/24 5:59 p.m.•7 views

CVE-2026-42945-nginx-rift

This repository does not have a README...

9.2CVSS7.7AI score0.03396EPSS
SaveExploits42
Kitploit
Kitploit
•added 2026/09/24 5:56 p.m.•14 views

CVE-2026-33032

CVE-2026-33032 / MCPwn Non-destructive detection tooling for the nginx-ui MCP authentication bypass known publicly as MCPwn. Ship a two-HTTP-request unauthenticated takeover of any nginx-ui instance running a vulnerable version. Table of Contents 1. Quick Facts 2. Vulnerability Overview 3...

9.8CVSS8.8AI score0.02523EPSS
SaveExploits5References1
Kitploit
Kitploit
•added 2026/09/24 5:53 p.m.•8 views

CVE-2026-42945

CVE-2026-42945 Security Detection Tool This is a CVE-2026-42945 static detection tool for defense and internal network investigation, used to check whether there are high-risk rewrite combinations in NGINX ngxhttprewritemodule related configurations. This project does not provide exploit code, do...

9.2CVSS8.4AI score0.03396EPSS
SaveExploits42
Kitploit
Kitploit
•added 2026/09/24 5:05 p.m.•17 views

CVE-2026-3288-lab

CVE-2026-3288 Vulnerable Lab Docker NGINX Ingress Controller Configuration Injection ⚠️ WARNING : This lab contains intentionally vulnerable configurations for AUTHORIZED SECURITY TRAINING ONLY Vulnerability Overview CVE-2026-3288 CVSS 8.8 HIGH - Configuration injection in NGINX Ingress Controller...

8.8CVSS7.9AI score0.00713EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/24 5:00 p.m.•12 views

cve-2026-33032-scanner

CVE-2026-33032 Scanner Non-destructive vulnerability scanner for Nginx-UI MCP Endpoint Authentication Bypass Vulnerability Overview CVE-2026-33032 is an authentication bypass vulnerability in nginx-ui's Model Context Protocol MCP integration. The /mcpmessage endpoint lacks authentication middlewa...

9.8CVSS8.8AI score0.02523EPSS
SaveExploits5
Kitploit
Kitploit
•added 2026/09/24 4:59 p.m.•13 views

CVE-2026-27944

CVE-2026-27944 POC: Nginx UI Unauthenticated Backup Download + Dashboard Access This repository contains an enhanced Proof of Concept POC exploit for CVE-2026-27944 , a critical vulnerability in Nginx UI. The vulnerability allows an unauthenticated attacker to download system backups via the...

9.8CVSS8AI score0.01014EPSS
SaveExploits13
Kitploit
Kitploit
•added 2026/09/24 4:58 p.m.•16 views

CVE-2026-33032-nginx-ui-vuln-lab

CVE-2026-27944 + CVE-2026-33032 — nginx-ui Zero-Credential RCE Lab Disclaimer: This repository is intended for educational and authorised security research purposes only. All techniques demonstrated here should only be used against systems you own or have explicit written permission to test. The...

9.8CVSS8.2AI score0.02523EPSS
SaveExploits16
Kitploit
Kitploit
•added 2026/09/24 4:56 p.m.•14 views

-nginxui_discover

Nginx UI Discovery Scanner - CVE-2026-27944 Version Detector https://img.shields.io/badge/python-3.6+-blue.svg https://img.shields.io/badge/license-MIT-green https://img.shields.io/badge/threading-multi--threaded-brightgreen Author: NULL200OK A high‑performance, multi‑threaded scanner to discover...

9.8CVSS7.7AI score0.01014EPSS
SaveExploits13References1
Kitploit
Kitploit
•added 2026/09/24 4:52 p.m.•12 views

CVE-2019-11043

CVE-2019–11043: Vulnerabilidad de ejecución remota de código en PHP-FPM Nginx Descripción de la vulnerabilidad e impacto CVE-2019–11043 es una vulnerabilidad de ejecución remota de código RCE. Afecta a PHP-FPM, que es un administrador de procesos FastCGI comúnmente utilizado con servidores web...

9.8CVSS7.6AI score0.9978EPSS
SaveExploits57
Kitploit
Kitploit
•added 2026/09/24 4:52 p.m.•8 views

hephaestus-server-forger

Auditor de seguridad del servidor para Apache, Nginx e IIS — 13 fases de escaneo, más de 70 códigos de hallazgos, guías de endurecimiento impulsadas por IA. Inicio rápido · Documentación · Docker · Análisis con IA ·...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/24 4:02 p.m.•8 views

nginx-rift-check

nginx-rift-check Finds configurations vulnerable to CVE-2026-42945 , the heap buffer overflow in nginx's ngxhttprewritemodule. Running an affected nginx version 0.6.27 through 1.30.0 is not enough to be exploitable. The configuration has to contain a specific pair of directives, and that pair is...

9.2CVSS8.1AI score0.03396EPSS
SaveExploits42
Kitploit
Kitploit
•added 2026/09/24 3:54 p.m.•10 views

NGINX_2026_CVE_Bundle_CTI_Report

🛡️ NGINX 2026 Multi-CVE CTI Investigation CVE-2026-28755 • CVE-2026-42926 • CVE-2026-9256 • CVE-2026-42055 • CVE-2026-42533 Created by Pratik Chhetri Report Date: 2026-07-28 📌 Executive Snapshot...

9.2CVSS7.3AI score0.02697EPSS
SaveExploits11
Kitploit
Kitploit
•added 2026/09/24 3:53 p.m.•6 views

CVE-2026-42533-nginx

CVE-2026-42533 nginx This repository contains a Go-based scanner for identifying nginx configuration patterns associated with the complexvalue two-pass capture-clobbering issue described in CVE-2026-42533. Overview The tool analyzes nginx configuration files and directories to detect risky...

9.2CVSS7.7AI score0.00894EPSS
SaveExploits6
Kitploit
Kitploit
•added 2026/09/24 3:12 p.m.•9 views

ssrfnginx

ssrfnginx...

5.3AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/24 3:06 p.m.•8 views

CVE-2026-42533

NGINX Vulnerability Checker Script to non-intrusively check if an NGINX installation could be affected by vulnerability CVE-2026-42533. Important: This project does not exploit the vulnerability. It only performs local checks on the installed version and server configuration to identify potential...

9.2CVSS7.7AI score0.00894EPSS
SaveExploits6
Rows per page
Query Builder