CVE-2026-42945-POC

CVE-2026-42945 Prueba de concepto de RCE para CVE-2026-42945 , un desbordamiento crítico de búfer en el montón en el ngxhttprewritemodule de NGINX introducido en 2008. El error permite la ejecución remota de código no autenticado contra servidores que utilizan las directivas rewrite y set. Esta...

CVE-2026-56722 Dompdf: Local file read due to improper file path validation in SVG images encoded as data-URI

Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, aAn attacker who controls the HTML input can bypass this restriction by embedding a target file path inside an SVG image delivered through a data: URI, because dompdf processes the SVG twice and the second pass does not...