Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: NGINX Rift: Critical 18-Year-Old Flaw CVE-2026-42945 Actively Exploited to Crash Servers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 04:51:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ASLR Mitigation #CVE_2026_42945 #Denial of Service #F5 Networks #Heap Buffer Overflow #Honeypot Telemetry #NGINX Rift #ngx_http_rewrite_module #Remote Code Execution #VulnCheck
Daily CyberSecurity
NGINX Rift: Critical 18-Year-Old Flaw CVE-2026-42945 Actively Exploited to Crash Servers
Critical 18-year-old "NGINX Rift" flaw CVE-2026-42945 is under active exploitation. Learn how to patch your proxies and block the unauthenticated heap overflow.
13 views
Daily Writeups
⤷ Title: VulnCheck Warns of Active Cisco Zero-Day and Massive Server Exploitation Wave
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 07:20:37 +0000
════════════════════════
⌗ Tags: #Vulnerability #Attack Surface Management #Cisco Catalyst Zero Day #CVE_2026_20182 #NGINX CVE_2026_42945 #Probllama CVE_2024_37032 #ProFTPD SQL Injection #threat intelligence 2026 #UAT_8616 #VulnCheck Report #WordPress Security
Penetration Testing Tools
VulnCheck Warns of Active Cisco Zero-Day and Massive Server Exploitation Wave
A constellation of severe vulnerabilities sweeping across ubiquitous server frameworks and third-party extensions has emerged as the focal
16 views
Daily Writeups
⤷ Title: Hackers Actively Exploit ‘Nginx Rift’ Vulnerability Affecting NGINX, F5 Products
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Tue, 19 May 2026 10:12:20 +0000
════════════════════════
⌗ Tags: #Security #Cyber Attack #Cybersecurity #F5 #NGINX #VulnCheck #Vulnerability
Hackread
Hackers Actively Exploit ‘Nginx Rift’ Vulnerability Affecting NGINX, F5 Products
Hackers are actively exploiting the Nginx Rift vulnerability affecting NGINX and F5 products, exposing servers to denial-of-service attacks.
25 views
Daily Writeups
⤷ Title: Critical 9.2 CVSS: NGINX JavaScript Module Flaw (CVE-2026-8711) Triggers Heap Buffer Overflows
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 03:02:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_8711 #Denial of Service #F5 Security Advisory #Heap Buffer Overflow #NGINX JavaScript #njs module #Patch Alert #Remote Code Execution #reverse proxy #Web Infrastructure
Daily CyberSecurity
Critical 9.2 CVSS: NGINX JavaScript Module Flaw (CVE-2026-8711) Triggers Heap Buffer Overflows
F5 warns of a critical 9.2 CVSS flaw (CVE-2026-8711) in NGINX JavaScript (njs). Unauthenticated attackers can trigger heap overflows and potential RCE.
17 views
Daily Writeups
⤷ Title: Hundreds of Millions Affected: New “nginx-poolslip” Zero-Day Weaponizes ASLR Bypass for Remote Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 02:31:14 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ASLR Bypass #Heap Feng Shui #infosec #memory corruption #Nebula Security #Nginx 1.31.0 #nginx_poolslip #rce #Remote Code Execution #Web Infrastructure #Zero_Day Vulnerability
Daily CyberSecurity
Hundreds of Millions Affected: New "nginx-poolslip" Zero-Day Weaponizes ASLR Bypass for Remote Code Execution
Urgent: Millions affected by "nginx-poolslip," a critical Nginx 1.31.0 zero-day that bypasses ASLR via heap feng shui to grant unauthenticated remote RCE.
14 views
Daily Writeups
⤷ Title: NGINX Fixes Critical Poolslip Flaw Allowing Remote Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 25 May 2026 00:44:15 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #buffer overflow #CVE_2026_9256 #F5 #nginx #Poolslip #Regular Expression
Daily CyberSecurity
NGINX Fixes Critical Poolslip Flaw Allowing Remote Code Execution
An NGINX heap buffer overflow vulnerability known as poolslip allows remote code execution. Learn how to secure your network servers now.
29 views
Daily Writeups
⤷ Title: CVE-2026–42945: Nginx Rift (THM) Tryhackme Walkthrough
════════════════════════
𐀪 Author: Lawvye
════════════════════════
ⴵ Time: Wed, 27 May 2026 17:48:52 GMT
════════════════════════
⌗ Tags: #nginx #cve_2026_42945 #tryhackme #cybersecurity #hacking
Medium
CVE-2026–42945: Nginx Rift (THM) Tryhackme Walkthrough
Description : Exploit NGINX Rift, an unauthenticated heap overflow RCE in NGINX’s rewrite module since 2008.
17 views
Daily Writeups
⤷ Title: CVE-2026–42945: Understanding NGINX Rift
════════════════════════
𐀪 Author: Mr. Spider
════════════════════════
ⴵ Time: Thu, 28 May 2026 13:47:13 GMT
════════════════════════
⌗ Tags: #heap_buffer_overflow #nginx_rift #rce_vulnerability #cve #nginx
Medium
CVE-2026–42945: Understanding NGINX Rift
NGINX Rift is a critical heap buffer overflow in NGINX’s ngx_http_rewrite_module. Under specific rewrite configurations, an unauthenticated…
53 views
Daily Writeups
⤷ Title: Nginx Rift (CVE-2026–42945)
════════════════════════
𐀪 Author: rezauditore
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 07:30:50 GMT
════════════════════════
⌗ Tags: #bug_bounty #nginx #programming #coding
Medium
Nginx Rift (CVE-2026–42945)
18 Year Old State Mismatch!
16 views
Daily Writeups
⤷ Title: Nginx Rift (CVE-2026–42945)-Part2
════════════════════════
𐀪 Author: rezauditore
════════════════════════
ⴵ Time: Fri, 05 Jun 2026 13:03:48 GMT
════════════════════════
⌗ Tags: #programming #penetration_testing #hacking #bug_bounty #nginx
Medium
Nginx Rift (CVE-2026–42945)-Part2
The first part:
21 views
Daily Writeups
⤷ Title: F5 Patches Two Critical NGINX Flaws in HTTP/3 and HTTP/2 Modules (CVE-2026-42530, CVE-2026-42055)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 02:23:02 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #buffer overflow #CVE_2026_42055 #CVE_2026_42530 #F5 #HTTP/3 #nginx #NGINX vulnerabilities #use after free
Daily CyberSecurity
F5 Patches Two Critical NGINX Flaws in HTTP/3 and HTTP/2 Modules (CVE-2026-42530, CVE-2026-42055)
Two critical NGINX vulnerabilities, CVE-2026-42530 and CVE-2026-42055, let remote attackers crash workers and possibly run code. Patch NGINX now.
10 views
Daily Writeups
⤷ Title: F5 Patches Critical NGINX Vulnerabilities in Out-of-Band Update
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 08:55:23 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_42055 #CVE_2026_42530 #F5 #Nginx #NGINX Gateway Fabric #vulnerability
Information Security News
F5 Patches Critical NGINX Vulnerabilities in Out-of-Band Update
F5 has issued an unscheduled security advisory for several products tied to NGINX and BIG-IP. The company detailed six NGINX vulnerabilities in total. Some earned a high severity rating, and F5 ha…
10 views
Daily Writeups
⤷ Title: CVE-2026–42530: Critical Integer Overflow in NGINX HTTP/3 Opens Door to Remote RCE and Trivial DoS
════════════════════════
𐀪 Author: CyDhaal
════════════════════════
ⴵ Time: Tue, 23 Jun 2026 20:10:54 GMT
════════════════════════
⌗ Tags: #cybersecurity #http3 #cve #rce #nginx
Medium
CVE-2026–42530: Critical Integer Overflow in NGINX HTTP/3 Opens Door to Remote RCE and Trivial DoS
A single malformed QUIC STREAM frame can crash worker processes or, with more effort, lead to full server compromise. Here’s the precise…
31 views
Daily Writeups
⤷ Title: NGINX Code Execution Vulnerability CVE-2026-42533 Patched Alongside Two Memory Flaws
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 16 Jul 2026 02:04:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Code Execution #CVE_2026_42533 #CVE_2026_56434 #CVE_2026_60005 #F5 #nginx
Daily CyberSecurity
NGINX Code Execution Vulnerability CVE-2026-42533 Patched Alongside Two Memory Flaws
TL;DR F5 has patched three memory safety flaws in NGINX Plus and NGINX Open Source. The most severe, CVE-2026-42533, is an NGINX code execution vulnerability in the map directive. It scores 9.2 (C…
22 views
Daily Writeups
⤷ Title: NGINX CVE-2026-42533 Vulnerability Fixed by F5
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 13:27:22 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_42533 #Nginx #remote code execution #vulnerability
Information Security News
NGINX CVE-2026-42533 Vulnerability Fixed by F5
NGINX developer F5 recently published a fresh security advisory about a dangerous bug. This flaw receives the tracking number CVE-2026-42533. Under certain settings, a hacker can easily exploit th…
32 views
Daily Writeups
⤷ Title: CVE-2026-42533: NGINX Heap Overflow Enables RCE and ASLR Bypass, Public PoC Released
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 13:01:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ASLR Bypass #CVE_2026_42533 #heap overflow #map directive #nginx #NGINX Plus #proof_of_concept #Remote Code Execution #ssl_preread #stream module
Daily CyberSecurity
CVE-2026-42533: NGINX Heap Overflow Enables RCE and ASLR Bypass, Public PoC Released
TL;DR: A public proof-of-concept now targets CVE-2026-42533, an NGINX heap overflow rated CVSS 9.2. The bug lets an unauthenticated attacker corrupt worker memory through crafted requests. Researc…
5 views
Daily Writeups
⤷ Title: When NGINX Comes Under Pressure: How WAF and SOC Buy You Time Until Patch
════════════════════════
𐀪 Author: Artechnism
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 10:58:13 GMT
════════════════════════
⌗ Tags: #cybersecurity #application_security #devsecops #nginx #waf
Medium
When NGINX Comes Under Pressure: How WAF and SOC Buy You Time Until Patch
A practical, context-aware approach to virtual patching and detection engineering — especially for offline or delayed-signature…
10 views
Daily Writeups
⤷ Title: CVE-2026-42530: NGINX HTTP/3 RCE Proof-of-Concept Publicly Disclosed
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 30 Jul 2026 13:02:26 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_42530 #HTTP/3 #nginx #NGINX HTTP/3 #ngx_http_v3_module #proof_of_concept #QPACK #QUIC #Remote Code Execution #use after free
Daily CyberSecurity
CVE-2026-42530: NGINX HTTP/3 RCE Proof-of-Concept Publicly Disclosed
TL;DR: A public proof-of-concept now targets CVE-2026-42530, an NGINX HTTP/3 RCE flaw rated CVSS 9.2. The use-after-free sits in the QPACK code of the HTTP/3 module. F5 fixed it in NGINX Open Sour…
8 views