NGINX_RIFT_SCAN_CVE_2026_42945

Сканер конфигурации NGINX Rift Язык: русский | English Это легковесный скрипт для проверки конфигураций NGINX на наличие паттернов риска CVE-2026-42945 NGINX Rift и CVE-2026-9256. Уязвимость была раскрыта depthfirst в статье NGINX Rift: Achieving NGINX RCE via an 18-Year-Old Vulnerability. Соглас...

log4shell-rex

Log4Shell-Rex Следующее регулярное выражение было написано в попытке сопоставить индикаторы эксплуатации Log4Shell CVE-2021-44228 и CVE-2021-45046. Если вы используете версию ранее 2021/12/21, настоятельно рекомендуется протестировать и обновить. Я убрал некоторые недочёты и улучшил...

CVE-2026-42533

CVE-2026-42533 — nginx map/regex capture clobbering tracking site Source for the CVE-2026-42533 patch-status tracker: a single-page site recording which distributions have shipped a fix for the nginx map/regex capture-clobbering heap overflow. Where the facts live Everything about the bug —...

NGINX-ngx_http_rewrite_module-heap-buffer-overflow-CVE-2026-9256

CVE-2026-9256 NGINX ngxhttprewritemodule PoC: выводы и размышления Область применения: только для локальных полигонов, авторизованных сред воспроизведения, проверки уязвимостей и анализа защитных правил. Не используйте на неавторизованных целях. Идеи PoC в этом документе проверяют только удаленно...

CVE-2026-42945

CVE-2026-42945 Инструмент проверки безопасности Это статический инструмент проверки CVE-2026-42945, предназначенный для защиты и внутреннего аудита. Он проверяет, есть ли в конфигурациях NGINX, связанных с ngxhttprewritemodule, высокорисковые комбинации rewrite. Этот проект не предоставляет...

nginx-cve-2026-42945-check

NGINX CVE-2026-42945 ローカル検査スクリプト 言語：中文 | English このリポジトリは、Linux / Windows サーバー上で Nginx、OpenResty、Tengine が CVE-2026-42945 関連のリスクを持つかどうかをローカルで調査するための、2つの検査スクリプトを提供します。 スクリプトは読み取り専用の収集とローカル判定のみを行い、脆弱性 PoC の実行、攻撃リクエストの送信、設定の変更、サービスの再起動、ソフトウェアのアップグレードは行いません。 脆弱性の背景 CVE-2026-42945 は NGINX Rift...

ghostlock-vagrant-box

전체 체인 취약점 테스트베드: Nginx RCE → GhostLock LPE 개요 이 저장소는 완전한 2단계 공격 체인을 시연하도록 설계된 Vagrant 환경을 제공합니다. 테스트베드는 다음 CVE에 대해 의도적으로 취약하도록 구성된 격리된 Ubuntu 22.04 LTS 가상 머신을 자동으로 프로비저닝합니다: 1. 초기 접근: CVE-2026-42533 — 원격 코드 실행RCE으로 이어지는 Nginx PCRE 캡처-클로버링capture-clobbering 취약점. 2. 권한 상승: CVE-2026-43449 GhostLock ...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nginx (UTSA-2026-106782)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106782 advisory. NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when a rewrite directive uses a regex pattern wit...

Unity Linux 20.1060a / 20.1070a Security Update: nginx (UTSA-2026-106781)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106781 advisory. NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when a rewrite directive uses a regex pattern wit...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nginx (UTSA-2026-106780)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106780 advisory. NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when a rewrite directive uses a regex pattern wit...

Unity Linux 20.1060a / 20.1070a Security Update: nginx (UTSA-2026-106785)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106785 advisory. NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when a rewrite directive uses a regex pattern wit...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nginx (UTSA-2026-106784)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106784 advisory. NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when a rewrite directive uses a regex pattern wit...

nginxrift-CVE-2026-42945

NGINX Rift RCE 익스플로잇 CVE-2026-42945 - @DepthFirstDisclosures 제작 NGINX Rift 취약점ngxhttprewritemodule의 치명적인 힙 기반 버퍼 오버플로을 연구하고 식별하기 위한 전문 PoCProof-of-Concept 도구입니다. 취약점 개요 CVE ID: CVE-2026-42945 별칭: NGINX Rift 심각도: Critical CVSS 9.2 영향받는 버전: NGINX 0.6.27 1.30.0 근본 원인: 이름 없는 PCRE 캡처$1, $2와 ?가 포함된 대체...

CVE-2026-75834 Grav before 2.0.14 Stored XSS via Invalid UTF-8 Byte

Grav before 2.0.14 contains a stored cross-site scripting vulnerability in the Security::detectXss function system/src/Grav/Common/Security.php. All XSS detection patterns use the PCRE /u UTF-8 modifier, so a single invalid UTF-8 byte anywhere in page content causes pregmatch to return false for...

ANT-2026-RVPC18B1 · libgit2 · Heap Buffer Overflow

heap-buffer-overflow medium GHSA-wfx7-g85r-q6vw Severity Claude medium · Security research firm medium · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-RVPC18B1: Heap buffer...

EUVD-2026-45083

Grav before 2.0.4 contains a regular expression denial of service ReDoS vulnerability in the regexreplace filter and function, which are allowlisted in the Twig content sandbox. When Twig processing in page content is enabled security.twigcontent.processenabled: true, disabled by default, an...

Security Bulletin: Vulnerability with the open source Perl Compatible Regular Expression (PCRE) library used in IBM Aspera Shares 1.9.2 and earlier

Question Security Bulletin: Vulnerability with the open source Perl Compatible Regular Expression PCRE library used in IBM Aspera Shares 1.9.2 and earlier "Business Unit":"code":"BU059","label":"IBM Software w/o TPS","Product":"code":"SS8NDZ","label":"IBM...

Security Bulletin: Multiple vulnerabilities Perl Compatible Regular Expression (PCRE) libraries - IBM Aspera Shares Application

Question Security Bulletin: Multiple vulnerabilities with the open source Perl Compatible Regular Expression PCRE libraries used in IBM Aspera Shares Application "Business Unit":"code":"BU059","label":"IBM Software w/o TPS","Product":"code":"SS8NDZ","label":"IBM...

Important: nginx

Issue Overview: NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression PCRE captures for example, ^/.$ and a replacement string...

OESA-2026-2587 nginx security update

NGINX is a free, open-source, high-performance HTTP server and reverse proxy, as well as an IMAP/POP3 proxy server. Security Fixes: NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when a rewrite directive uses a regex pattern wit...