CVE-2026-42533

CVE-2026-42533 — Sito di tracciamento della sovrascrittura di cattura nginx map/regex Tracker dello stato delle patch per CVE-2026-42533 , un heap buffer overflow nel motore di valutazione script a due passate di nginx. nginx misura un'espressione stringa in una passata LEN e la scrive in una...

Nuclei: Environment variable disclosure via Response-Derived DSL Expressions

A vulnerability in Nuclei's expression evaluation engine makes it possible for a malicious target server to inject and execute supported DSL expressions. This happens when HTTP response data containing helper/function syntax gets reused by multi-step templates. If the -env-vars / -ev option is...

PT-2026-34612

Name of the Vulnerable Software and Affected Versions Nuclei versions 3.0.0 through 3.7.9 Description A flaw in the expression evaluation engine allows a malicious target server to inject and execute supported Domain Specific Language DSL expressions. This occurs when HTTP response data containin...