CVE-2026-42945

NGINX Rift RCE Proof of concept for CVE-2026-42945 , a critical heap buffer overflow in NGINX's ngxhttprewritemodule introduced in 2008. The bug enables unauthenticated remote code execution against servers using rewrite and set directives. This vulnerability — along with three other memory...

NGINX_RIFT_SCAN_CVE_2026_42945

NGINX Rift Config Scanner Language: 中文 | English This is a lightweight scanner for checking whether an NGINX configuration contains risky CVE-2026-42945, also known as NGINX Rift, and CVE-2026-9256 configuration patterns. The issue was disclosed by depthfirst in NGINX Rift: Achieving NGINX RCE vi...

nginx-rift-private-lab

NGINX Rift RCE Proof of concept for CVE-2026-42945 , a critical heap buffer overflow in NGINX's ngxhttprewritemodule introduced in 2008. The bug enables unauthenticated remote code execution against servers using rewrite and set directives. This fork extends the original PoC with an ASLR-bypass...

nGixshell

nGixShell is an nginx CVE scanner and RCE exploit framework. It ships a working proof-of-concept for CVE-2026-42945 — a critical heap buffer overflow in ngxhttprewritemodule — and a scanner covering 53 nginx CVEs with automated HTTP probes, fingerprinting, WAF detection/bypass, web security...

CVE-2026-42945_NginxRift

🚀 NGINX Rift PoC Automation — CVE-2026-42945 PoC Automation Driver for RCE exploitation of thenginx-rift container · Target verification → Single-command exploit → Interactive reverse shell One command orchestrates the entire exploit flow — from container check to getting a shell. ⚠️ Ethical &...

CVE-2026-42945-POC

CVE-2026-42945 NGINX Rift - Exploit compatible HTB Exploit autonome pour la vulnérabilité de dépassement de tas heap buffer overflow dans NGINX découverte en 2024. Cette version est optimisée pour les environnements HackTheBox et CTF où vous ne pouvez pas mettre en place de conteneurs Docker...

nginx-cve-2026-42945-poc

CVE-2026-42945 — NGINX Rewrite Module Débordement de tas → RCE RCE confirmé avec succès — Exécution de commandes arbitraires dans les processus workers NGINX / OpenResty via débordement de tas + injection de processus GDB. Démarrage rapide root@kitploit: One-click build NGINX image + execute RCE...

CVE-2026-42945

CVE-2026-42945 Script d'évaluation des risques réels Outil local d'évaluation des risques pour CVE-2026-42945 Nginx Rift. Contrairement à ceux qui vous disent simplement « si la version est affectée, c'est dangereux », ce script vérifie couche par couche les trois conditions qui déterminent...

CVE-2026-42945

CVE-2026-42945 Security Detection Tool This is a CVE-2026-42945 static detection tool for defense and internal network investigation, used to check whether there are high-risk rewrite combinations in NGINX ngxhttprewritemodule related configurations. This project does not provide exploit code, do...

nginx-cve-2026-42945-check

Script de vérification local NGINX CVE-2026-42945 Langue : 中文 | English Ce dépôt fournit deux scripts de vérification autonomes pour inspecter localement sur des serveurs Linux/Windows si Nginx, OpenResty, Tengine présentent des risques liés à CVE-2026-42945. Le script effectue uniquement une...

nginx-rift-detect

nginx-rift-detect Script de détection comportementale pour CVE-2026-42945 NGINX Rift — un dépassement de tampon dans le tas dans ngxhttprewritemodule présent dans nginx depuis 2008. ⚠️ Avertissement Cet outil est destiné uniquement aux tests de sécurité autorisés et à la recherche. Exécutez-le...

CVE-2026-42945

RIFT — Remote Injection & Fault Trigger Author: Michael Sanji Winaya Prawiradibrata AI Co-Author: Varanus — sahabatku Heap buffer overflow exploit framework targeting NGINX's ngxhttprewritemodule. Satu tool untuk reconnaissance + exploitation. Zero external dependencies. Isi Repo File| Deskripsi...

Nginx-Rift

NGINX Rift RCE Proof of concept for CVE-2026-42945 , a critical heap buffer overflow in NGINX's ngxhttprewritemodule introduced in 2008. The bug enables unauthenticated remote code execution against servers using rewrite and set directives. This vulnerability — along with three other memory...

nginx-rce-cve-2026-42945

5. CVE-2026-42945 - RCE critique dans NGINX CVSS 9.2 Classification Catégorie : 0-Day / Exécution de code à distance CVE : CVE-2026-42945 CVSS : 9.2 Critique Date de découverte : 12 mai 2026 Date du correctif : Mai 2026 publication de sécurité trimestrielle de F5 Source : GitHub...

CVE-2026-42945

CVE-2026-42945 — NGINX Rift Heap Buffer Overflow in NGINXngxhttprewritemodule...

CVE-2026-42945-Reverse-Shell-POC

CVE-2026-42945 NGINX Rift RCE PoC with Reverse Shell Remote code execution proof-of-concept for CVE-2026-42945 , a heap buffer overflow in NGINX's ngxhttprewritemodule. This fork extends the public trigger PoC with an embedded reverse-shell listener and configurable exploitation parameters for CT...

CVE-2026-9256-Poc

nginx ngxhttprewritemodule Heap Buffer Overflow Description nginx Plus and nginx Open Source ngxhttprewritemodule contains a heap buffer overflow vulnerability. When a rewrite directive uses a regex with multiple overlapping PCRE capture groups e.g. ^/.$ and a replacement referencing multiple...

CVE-2026-9256

CVE-2026-9256 — nginx rewrite-module heap overflow tracking site Source for the CVE-2026-9256 patch-status tracker: a single-page site recording which distributions have shipped a fix for the nginx rewrite-module heap overflow. Where the facts live Everything about the bug — affected and fixed...

CVE-2026-42945

🛡️ CVE-2026-42945 - NGINX Rift Critical Heap-Based Buffer Overflow in NGINX 📌 Overview CVE-2026-42945 also known as NGINX Rift is a critical security vulnerability in the ngxhttprewritemodule of NGINX. Type : Heap-based Buffer Overflow CWE-122 Discovered : May 2026 Existed For : 18 years...

nginxrift-CVE-2026-42945

NGINX Rift RCE Exploit CVE-2026-42945 from @DepthFirstDisclosures A professional Proof-of-Concept PoC tool for researching and identifying the NGINX Rift vulnerability, a critical heap-based buffer overflow in the ngxhttprewritemodule. Vulnerability Overview CVE ID: CVE-2026-42945 Alias: NGINX Ri...