🧰 nginx

The items that name it 25

• Trail of Bits (@trailofbits) on X
  threadas classification.technologies2026-10-26
• Paul Dragoonis (@dr4goonis) on X
  threadas affected products2026-10-22It is written here as NGINX (3 Critical vulnerabilities; fixed in 1.30.6, 1.31.8).

  3 Critical vulnerabilities; fixed in 1.30.6, 1.31.8

• ikow/php2shell-poc
  repoas classification.technologies2026-10-21
• lee1981 (@lee1981b) on X
  advisoryas classification.technologies2026-10-19
• F5, Juniper Networks Patch Critical Vulnerabilities
  articleas classification.technologies2026-10-16
• A fully programmable secure web gateway
  articleas tools2026-10-15

  Named as the proxy pool teams stand up to inject HTTP headers from JWT claims, which the new features replace.

• trhhubsd/ARTEX
  repoas tools2026-10-08It is written here as Nginx: reverse proxy example for ARTEX with buffering disabled for SSE.
• [tl;dr sec] #347 - AI Agents Hacking Companies for $25, Threat Hunter's Guide to GitHub, Finding Gadgets Like it’s 2026
  articleas affected products2026-09-24It is written here as Nginx (proxy_pass directive with $uri variable).

  proxy_pass directive with $uri variable

• https://github.com/akha-security/akca
  repoas affected products2026-09-23

  alias traversal checks covered by AKCA

• SETTRA RANSOMWARE
  writeupas tools2026-09-14

  Web server software powering Settra's DLS.

• numasec
  repoas affected products2026-08-27

  example observed component used to illustrate the knowledge broker's vulnerability intelligence enrichment (KEV/EPSS)

• MAJINAHANASHI RANSOMWARE: Yet Another Japanese Locker
  writeupas classification.technologies2026-08-14
• SiberKapan
  repoas classification.technologies2026-08-08
• Precogly
  repoas tools2026-08-05

  Production infrastructure component for Precogly

• INC RANSOMWARE: THREAT INTELLIGENCE
  writeupas classification.technologies2026-07-24
• HackingLZ/gibson
  repoas tools2026-07-22

  Example reverse proxy configuration for TLS termination and API key validation in front of the collector server, proxying uploads to a local processing service

• Orca Security: Critical Heap Buffer Overflow in NGINX Allows Unauthenticated RCE
  advisoryas classification.technologies2026-07-20
• AI-Powered Threat Modeling
  repoas affected products2026-07-17

  example component in sample architecture

• Orca Security: nginx Flaw in 1.45M Tengine Servers (CVE-2026-42945 + CVE-2026-9256)
  writeupas affected products2026-06-16

  Upstream project; already patched by F5.

• NGINX Rift: Achieving NGINX RCE via an 18-Year-Old Vulnerability (CVE-2026-42945)
  writeupas classification.technologies2026-05-13
• How to Secure a Linux Server
  repoas classification.technologies2026-05-06
• PHP2Shell: pre-auth RCE via PHP memory-limit fatal errors (CVE-2026-109618/109619)
  writeupas classification.technologies
• DVLAA
  repoas tools

  5080 单端口网关，按虚拟主机与前缀路由到控制台、AWDP 真实目标应用和模拟目标服务

• Three CVEs and the May 2026 Exploit Chain Nobody's Taking Seriously (nginx Rift)
  articleas classification.technologies
• CVE-2026-42533 nginx heap buffer overflow PoC (pre-auth RCE via two-pass capture clobbering)
  repoas affected products