PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2026-42945] NGINX Rift: Achieving NGINX Remote Code Execution via an 18-Year-Old Vulnerability

depthfirst.com | research | CVE-2026-42945 | #rce | #vulnerability-research | #memory-corruption | #heap-overflow | #nginx | #cve-2026-42945
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

depthfirst's system found four remote memory-corruption bugs in NGINX, including a 2008-era heap overflow (CVE-2026-42945); a PoC shows RCE with ASLR off. rewrite/set users are at risk.
CVE
CVE-2026-42945
Published
Collected

Related coverage

research · github.com
Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis
Provides a detailed binary-level case study on PHP Zend memory manager behavior and worker state persistence after fatal out-of-memory errors.
research · crowdstrike.com
CrowdStrike Protects Customers from Threats Delivered via PHP2Shell
The Falcon platform provides out-of-the-box visibility and detection coverage for post-exploitation activities of CVE-2026-109618 and CVE-2026-109619.
research · slcyber.io
More Critical Bugs in Adobe Experience Manager: Pre-Auth RCE
Chaining an unauthenticated bulk import, an in-band XXE, leaked IMS credentials and Groovy execution into full pre-auth RCE on Adobe Experience Manager Cloud.
research · osec.io
Pwning Minecraft: 4-byte heap overflow to RCE
OtterSec achieves RCE in Minecraft Bedrock, turning a 4-byte heap overflow from a malicious server into full client compromise on Windows, bypassing ASLR and Control Flow Guard.
research · aretiq.ai
CVE-2026-9256 — NGINX ngx_http_rewrite_module Overlapping PCRE Captures Heap Buffer Overflow RCE
CVE-2026-9256: nginx rewrite-module heap overflow when overlapping PCRE captures re-expand—giving heap-write and info-leak primitives for a viable RCE path; fixed in 1.31.1 and 1.30.2.
vulnerability · bishopfox.com
A Bug Has No Name: Multiple Heap Buffer Overflows In the Windows DNS Client
Dissecting CVE-2017-11779: unsafe NSEC3 record parsing in Windows DNSAPI.dll causes multiple heap overflows, and an attacker-controlled DNS server can trigger arbitrary code execution.
Back