CVE-2026-42945

RIFT — Remote Injection & Fault Trigger Author: Michael Sanji Winaya Prawiradibrata AI Co-Author: Varanus — sahabatku Heap buffer overflow exploit framework targeting NGINX's ngxhttprewritemodule. Satu tool untuk reconnaissance + exploitation. Zero external dependencies. Isi Repo File| Deskripsi...

AlmaLinux 9.2 [TuxCare] Security Update: pki-servlet-4.0-api / pki-servlet-engine (ALMALINUX9.2:CLSA-2026:1769701085)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1769701085 advisory. - Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat. For a subset of unlikely rewrite rule...

AlmaLinux 9.2 [TuxCare] Security Update: pki-servlet-4.0-api / pki-servlet-engine (ALMALINUX9.2:CLSA-2026:1768989206)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1768989206 advisory. - Relative Path Traversal vulnerability in Apache Tomcat. The fix for bug 60013 introduced a regression where the rewritten URL was normalize...

AlmaLinux 9.6 [TuxCare] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc (ALMALINUX9.6:CLSA-2025:1767098873)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2025:1767098873 advisory. - Relative Path Traversal vulnerability in Apache Tomcat. The fix for bug 60013 introduced a regression where the rewritten URL was normalize...

Rocky Linux 9.6 [TuxCare] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc (ALMALINUX9.6:CLSA-2025:1767098873)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2025:1767098873 advisory. - Relative Path Traversal vulnerability in Apache Tomcat. The fix for bug 60013 introduced a regression where the rewritten URL was...

CentOS Linux 8.5 [TuxCare] Security Update: git / git-all / git-core / git-core-doc / git-credential-libsecret / etc (CENTOS8.5:CLSA-2025:1762536892)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2025:1762536892 advisory. - Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, local clones may end up...

RHEL 6 : kernel (RHSA-2026:73732)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:73732 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: netfilter: ebtables SNAT target writes...

NPM: brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service

NPM: brace-expansion: Quadratic-time expansion of the a,b rewrite causes CPU denial of service vulnerability discovered by ? in WordPress Npm brace-expansion versions 1.1.21...

brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service

Summary Expanding a,b-shaped input takes time quadratic in the number of literal characters, blocking the event loop. Bash preserves a quirk where a brace group followed by a comma set still expands a,b. The parser implements this by rewriting the string and restarting the scan. Each pass absorbs...

CVE-2026-42945

CVE-2026-42945 — NGINX Rift Heap Buffer Overflow in NGINXngxhttprewritemodule Metric| Value ---|--- CVSS v4.0| 9.2 Critical CVSS v3.1| 8.1 High — AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE| 122 — Heap-based Buffer Overflow Introduced| June 2008 — v0.6.27 Discovered| April 2026 — DepthFirst Research...

CVE-2026-42945-Reverse-Shell-POC

CVE-2026-42945 NGINX Rift RCE PoC with Reverse Shell Remote code execution proof-of-concept for CVE-2026-42945 , a heap buffer overflow in NGINX's ngxhttprewritemodule. This fork extends the public trigger PoC with an embedded reverse-shell listener and configurable exploitation parameters for CT...

CVE-2026-9256-Poc

nginx ngxhttprewritemodule Heap Buffer Overflow Description nginx Plus and nginx Open Source ngxhttprewritemodule contains a heap buffer overflow vulnerability. When a rewrite directive uses a regex with multiple overlapping PCRE capture groups e.g. ^/.$ and a replacement referencing multiple...

CVE-2026-9256

CVE-2026-9256 — nginx rewrite-module heap overflow tracking site Source for the CVE-2026-9256 patch-status tracker: a single-page site recording which distributions have shipped a fix for the nginx rewrite-module heap overflow. Where the facts live Everything about the bug — affected and fixed...

CVE-2026-42945

🛡️ CVE-2026-42945 - NGINX Rift Critical Heap-Based Buffer Overflow in NGINX 📌 Overview CVE-2026-42945 also known as NGINX Rift is a critical security vulnerability in the ngxhttprewritemodule of NGINX. Type : Heap-based Buffer Overflow CWE-122 Discovered : May 2026 Existed For : 18 years...

kernel-c-to-rust-spike

Kernel C-to-Rust hardening spike: UVC descriptor parser Can a security-critical Linux kernel C parser be hardened by rewriting it in Rust, with the rewrite shown equivalent to the original and then formally verified? This spike runs the full loop on one target: the UVC video descriptor parser...

nginxrift-CVE-2026-42945

NGINX Rift RCE Exploit CVE-2026-42945 from @DepthFirstDisclosures A professional Proof-of-Concept PoC tool for researching and identifying the NGINX Rift vulnerability, a critical heap-based buffer overflow in the ngxhttprewritemodule. Vulnerability Overview CVE ID: CVE-2026-42945 Alias: NGINX Ri...

NGINX-Rift

NGINX Rift — CVE-2026-42945 / CVE-2026-9256 Vulnerability Scanning and Verification Tool NGINX Rift is an open-source scanning and verification tool targeting CVE-2026-42945 and CVE-2026-9256 heap overflow vulnerabilities in NGINX ngxhttprewritemodule. It supports remote network fingerprint...

Off-by-one Error

org.apache.tomcat, tomcat-catalina is vulnerable to an Off-by-one Error. The vulnerability is due to rewrite processing restarting at the second rule instead of the first, which allows an attacker to potentially bypass intended rewrite rules or cause unintended request processing...

opensource_defect_repare_cc

需求 漏洞挖掘与修复 项目中在code目录下的代码仓有已知的若干漏洞，你需要重写该项目的核心模块（接口完全不变，实现方式变化，重构前后相似度不超过20%，所有public/private方法签名，异常声明，注解，泛型，类继承关系必须和原项目一致，并且重构前后功能保持一致，通过测试所有已知的接口行为和输入输出一致性，验证前后功能的一致性），并修复代码仓中的全部已知bug，修复前后性能劣化不超过5%，中work/docs放置README.md，内容为AI重构流程说明（如何分解模块，验证正确性，修复bug，降低重复率），用于评委主观评审。...

CVE-2026-100618: Authorization Bypass Through User-Controlled Key

Capgo capgo.app is affected by an authorization flaw in the app icon update path. The PUT /app/:id endpoint accepts a user-controlled icon value, normalizes it, and stores it in public.apps.iconurl without verifying that the image path belongs to the target app's own image namespace e.g...