Lucene search
+L

7894 matches found

OSV
OSV
•added 2026/09/25 12:27 p.m.•7 views

BIT-NGINX-GATEWAY-2026-90439 NGINX ngx_http_v3_module vulnerability

NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpv3module module. When using HTTP/3 with OpenSSL versions = OpenSSL 3.5.0 under certain configurations, a limited heap buffer overflow could happen while processing a TLS handshake. This can happen in a non-deterministic manner th...

6.9CVSS6.3AI score0.00425EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/25 12:27 p.m.•7 views

BIT-NGINX-2026-90439 NGINX ngx_http_v3_module vulnerability

NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpv3module module. When using HTTP/3 with OpenSSL versions = OpenSSL 3.5.0 under certain configurations, a limited heap buffer overflow could happen while processing a TLS handshake. This can happen in a non-deterministic manner th...

6.9CVSS6.3AI score0.00425EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/25 9:45 a.m.•12 views

CVE-2026-42533

CVE-2026-42533 — nginx two-pass capture clobbering Pre-auth heap overflow + info leak in nginx 0.9.6–1.30.3 / mainline ≤1.31.2 complex-value script engine; CVSS 9.2. Two trigger surfaces share the same root cause: HTTP regex location + regex map and stream sslpreread + SNI + regex map. In-depth...

9.2CVSS7.5AI score0.00894EPSS
SaveExploits6References4
Kitploit
Kitploit
•added 2026/09/25 8:57 a.m.•11 views

CVE-2019-11043-Vulnerability

Collaberators: Olaf Madejski, Andrew Masone, Nate Desany PHP-FPM Reverse Tunnel Exploitation & Persistence Demonstration CVE-2019-11043 — Debian PHP-FPM Path Handling Vulnerability Project Overview In October 2019, Debian Security Advisory researchers Emil Lerner and Andrew Danau published a noti...

9.8CVSS8.5AI score0.9978EPSS
SaveExploits57References8
Kitploit
Kitploit
•added 2026/09/25 8:43 a.m.•10 views

CVE-2026-42945

NGINX Rift RCE Proof of concept for CVE-2026-42945 , a critical heap buffer overflow in NGINX's ngxhttprewritemodule introduced in 2008. The bug enables unauthenticated remote code execution against servers using rewrite and set directives. This vulnerability — along with three other memory...

9.2CVSS8.4AI score0.03396EPSS
SaveExploits42
Kitploit
Kitploit
•added 2026/09/25 7:20 a.m.•8 views

DIY-CVE-2026-42945-POC

Ubuntu 22.04 + nginx 1.30.0 Docker Runtime This environment builds nginx 1.30.0 from source on Ubuntu 22.04 for local HTTP testing. PHP-FPM is configured directly in the Dockerfile because nginx.conf forwards PHP requests to /tmp/php-cgi-80.sock. Run root@kitploit: docker compose up -d --build Th...

9.2CVSS7.9AI score0.03396EPSS
SaveExploits42
Kitploit
Kitploit
•added 2026/09/25 6:17 a.m.•12 views

CVE-2026-42533-POC

CVE-2026-42533 Pre-auth heap buffer overflow and heap information leak in nginx, caused by missing save/restore of PCRE capture state across the two passes of the script engine. A regex map variable evaluated between two capture references overwrites r-captures, so the LEN pass and the VALUE pass...

9.2CVSS7.9AI score0.00894EPSS
SaveExploits6
Kitploit
Kitploit
•added 2026/09/25 5:24 a.m.•10 views

nginx-cve-2026-42945-poc

CVE-2026-42945 — NGINX Rewrite Module Heap Buffer Overflow → RCE RCE confirmed successful — via heap overflow + GDB process injection, execute arbitrary commands in NGINX / OpenResty worker processes. Quick Start root@kitploit: One-click build NGINX image + execute RCE test ./run.sh nginx One-cli...

9.2CVSS8.4AI score0.03396EPSS
SaveExploits42
Kitploit
Kitploit
•added 2026/09/25 5:10 a.m.•10 views

CVE-2026-42945

CVE-2026-42945 Practical Risk Assessment Script A local risk assessment tool for CVE-2026-42945 Nginx Rift. Unlike simply telling you "version is affected so it's dangerous", this script checks the three conditions that truly determine risk layer by layer and gives a conclusion tailored to your...

9.2CVSS7.9AI score0.03396EPSS
SaveExploits42
Kitploit
Kitploit
•added 2026/09/25 5:07 a.m.•10 views

cve-2019-11043

PHP Remote Code Execution Vulnerability CVE-2019-11043 1. Background On September 26, PHP officially released a vulnerability advisory pointing out that servers using Nginx + php-fpm, under certain configurations, have a remote code execution vulnerability. Moreover, this configuration is widely...

9.8CVSS7.9AI score0.9978EPSS
SaveExploits57
Kitploit
Kitploit
•added 2026/09/25 4:16 a.m.•177 views

naxsi

Project Status This is a project status update regarding Naxsi. As you may have noticed, the development of Naxsi has been stopped and the repository will be archived for historical reasons. This means that no new updates or bug fixes will be released for this version. However, if you wish to...

5.7AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/25 4:16 a.m.•10 views

naxsi

Estado del Proyecto Esta es una actualización del estado del proyecto sobre Naxsi. Como habrán notado, el desarrollo de Naxsi se ha detenido y el repositorio será archivado por razones históricas. Esto significa que no se publicarán nuevas actualizaciones ni correcciones de errores para esta...

5.7AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/25 3:47 a.m.•32 views

linux-explorer

This project is no longer maintained! Linux Expl0rer Easy-to-use live forensics toolbox for Linux endpoints written in Python & Flask. Capabilities ps View full process list Inspect process memory map & fetch memory strings easly Dump process memory in one click Automatically search hash in publi...

6.1AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/25 3:34 a.m.•2630 views

nginxpwner

Nginxpwner Nginxpwner is a simple tool to look for common Nginx misconfigurations and vulnerabilities. Install: root@kitploit: cd /opt git clone https://github.com/stark0de/nginxpwner cd nginxpwner chmod +x install.sh ./install.sh Install using Docker root@kitploit: git clone...

6.1AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/25 3:34 a.m.•11 views

nginxpwner

Nginxpwner Nginxpwner es una herramienta simple para buscar configuraciones incorrectas y vulnerabilidades comunes de Nginx. Instalación: root@kitploit: cd /opt git clone https://github.com/stark0de/nginxpwner cd nginxpwner chmod +x install.sh ./install.sh Instalar usando Docker root@kitploit: gi...

8AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/25 3:28 a.m.•14 views

nginx-overflow

This repository does not have a README...

5.8AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/25 2:29 a.m.•8 views

CVE-2017-7529-Nginx---Remote-Integer-Overflow-Exploit

This repository does not have a README...

7.5CVSS6.8AI score0.62597EPSS
SaveExploits6
Kitploit
Kitploit
•added 2026/09/25 2:13 a.m.•12 views

CVE-2017-7529-

CVE-2017-7529-Nginx Range Header Integer Overflow Nginx is an open-source web server widely used as a high-performance web server, reverse proxy, cache server, and more. In Nginx versions up to 1.13.2, an integer overflow vulnerability exists that allows an attacker to manipulate the Range header...

7.5CVSS6.7AI score0.62597EPSS
SaveExploits6
Nuclei
Nuclei
•added 2026/09/25 2:05 a.m.•467 views

Ingress-Nginx Controller - Remote Code Execution

A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secrets accessible to the controller. Note...

9.8CVSS7.5AI score0.99384EPSS
SaveExploits20References5
Nuclei
Nuclei
•added 2026/09/25 2:05 a.m.•64 views

Ingress-Nginx Controller - Configuration Injection via Unsanitized Mirror Annotations

A security issue was discovered in ingress-nginx https-//github.com/kubernetes/ingress-nginx where the mirror-target and mirror-host Ingress annotations can be used to inject arbitrary configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx...

8.8CVSS7.1AI score0.82313EPSS
SaveExploits7References3
Rows per page
Query Builder