NGINX Vulnerabilities
40 vulnerabilities related to NGINX
- PoC2026-07-24NginxWebUI /adminPage/login/getAuth 命令执行漏洞
- PoC2026-07-24NginxWebUI /Adminpage/Conf/loadOrg 文件读取漏洞
- 2026-07-24NginxWebUI /Api/Nginx/runNginxCmd 命令执行漏洞
- 2026-07-24NginxWebUI /Adminpage/Remote/cmdOver 命令执行漏洞
- 2026-05-15NGINX ngx_http_rewrite_module 堆缓冲区溢出漏洞
- PoC2026-04-17Nginx Proxy Manager /api/tokens 默认口令漏洞
- PoC2026-04-16CVE-2026-33032: Nginx UI - Broken Access Control
- PoC2026-03-10CVE-2026-27944: Nginx UI < 2.3.3 - Information Disclosure
- 2026-03-10Nginx UI密钥泄露 CVE-2026-27944
- 2026-03-09Nginx UI /api/backup 未授权访问漏洞（CVE-2026-27944）
- PoC2025-12-02nginx-status-403-bypass: Nginx Status Page - 403 Bypass
- 2025-09-05nginxWebUI cmdOver 远程命令执行漏洞
- PoC2025-08-01CVE-2025-1974-k8s: Ingress-Nginx Controller - Unauthenticated Remote Code Execution
- PoC2025-08-01CVE-2025-1097: Ingress-Nginx Controller - Configuration Injection via Unsanitized `auth-tls-match-cn` Annotation
- PoC2025-08-01CVE-2025-1098: Ingress-Nginx Controller - Configuration Injection via Unsanitized Mirror Annotations
- PoC2025-08-01CVE-2025-1974: Ingress-Nginx Controller - Remote Code Execution
- PoC2025-08-01CVE-2025-24514: Ingress-Nginx Controller - Configuration Injection via Unsanitized `auth-url` Annotation
- PoC2025-08-01nginx-merge-slashes-path-traversal: Nginx Merge Slashes Path Traversal
- PoC2025-08-01nginxwebui-admin-bypass: NginxWebUI admin认证绕过（全版本通杀）
- PoC2025-08-01nginxwebui-rce: Nginx Web UI RCE
- PoC2025-08-01phpstudy-nginx-wrong-resolve: Phpstudy Nginx Wrong Resolve
- PoC2025-08-01file-disable-nginx-server-tokens: Disbale Nginx Server Tokens
- PoC2025-08-01file-missing-nginx-bof-protection: Missing Nginx Buffer Overflow Protection
- PoC2025-08-01file-missing-nginx-xss-protection: Missing Nginx XSS Protection
- PoC2025-08-01file-missing-nginx-hsts: Missing Nginx HSTS
- PoC2025-08-01file-missing-nginx-rate-limiting: Missing Nginx Rate Limiting Configuration
- PoC2025-08-01nginx-proxy-manager-default-login: Nginx Proxy Manager - Default Login
- PoC2025-08-01git-config-nginxoffbyslash: Nginx - Git Configuration Exposure
- PoC2025-08-01nginx-shards: NGINX Shards Disclosure
- PoC2025-08-01ingress-nginx-valid-admission: Kubernetes Ingress-Nginx Valid AdmissionReview - Detection
- PoC2025-08-01nginx-auto-installer: NginX Auto Installer Exposure
- PoC2025-08-01nginx-api-traversal: Nginx Plus Rest API - Traversal
- PoC2025-08-01nginx-vhost-traffic-status: Nginx Vhost Traffic Status
- PoC2025-08-01unauthenticated-nginx-dashboard: Nginx Dashboard
- PoC2025-08-01nginx-merge-slashes-path-traversal: Nginx Server - Local File Inclusion
- PoC2025-08-01nginx-module-vts-xss: Nginx Virtual Host Traffic Status Module - Cross-Site Scripting
- PoC2025-08-01nginx-webui-rce: nginxWebUI ≤ 3.5.0 - Remote Command Execution
- PoC2025-08-01nginxwebui-runcmd-rce: nginxWebUI ≤ 3.5.0 runCmd - Remote Command Execution
- 2023-05-12nginxWebUI runCmd 文件命令执行漏洞
- 2023-05-12nginxWebUI runCmd 文件命令执行漏洞