Catálogo de exploits

Scan your NGINX configuration to determine whether it is affected by CVE-2026-42945.

initial-access

CVE-2026-46300

Fragnesia LPE (CVE-2026-46300)

CVE-2011-3192 - Remote Apache DOS for Apache versions 1.3.x, 2.0.64 and below and 2.2.19 and below. Developed in 2011 by Antonius (ev1lut10n / w1sdom)

Test repo: simulates CVE-2025-30066 style compromised GitHub Action (for security research/testing chainradar)

PJPROJECT 2.16 - Heap Bufferoverflow

Proof of concept exploit for CVE-2026-46391

ratiros01/CVE-2014-9173

ChamsBouzaiene/ai-vuln-rediscovery-nginx-cve-2026-42945

User Registration & Membership <= 5.1.5 - Unauthenticated Missing Authorization to Admin Approval Bypass via 'action' Parameter

CVE-2026-8181 - Burst Statistics 3.4.0-3.4.1.1 Unauthenticated Authentication Bypass to Admin Account Takeover | Proof of Concept

local

initial-access

exploit for CVE-2026-42945

ePati Antikor NGFW 2.0.1301 - Authentication Bypass

nanwinata/nginxrift-CVE-2026-42945

denial-of-service

NGINX Rift 漏洞分析与复现

CVE-2011-1485 - Linux pkexec and polkitd 0.96 race condition privilege escalation exploit. Developed in 2011 by Antonius (ev1lut10n / w1sdom)

initial-access

These detection scripts are property of the SECPlayground Platform. Two safe detection scripts. Neither drives the close_notify-mid-BDAT trigger, so they will not crash the daemon or leave panic-log entries. Both verdicts are "likely vulnerable" — distinguishing GnuTLS from OpenSSL builds remotely is not reliable without exploitation.

mbanyamer/CVE-2026-22553-InSAT-MasterSCADA-BUK-TS-MMadmServ

A comprehensive full-lifecycle penetration testing project on Joomla 4.2.5 exploiting CVE-2023-23752 inside a Dockerized lab environment

CVE-2005-0575 - KNet Web Server 1.04b Remote Buffer Overflow SEH Exploit for x86 Windows XP SP3, this exploit needs some adjustment ! edit the code before run ! Developed by Antonius - made in the past, I forgot when I made it

Linux Kernel __ptrace_may_access() Exit Race chage File Disclosure

Snort 3 IDS → IPS lab on Kali. Custom detection rules + iptables enforcement against ICMP recon, Nmap SYN scans, Hydra FTP brute force, and vsftpd 2.3.4 backdoor (CVE-2011-2523).

Wingdata — HackTheBox | CVE-2025-47812 WingFTP command injection, tar path traversal sudo privesc

CVE-2026-44403-WingFTP-v8.1.2-POC-Exploit

Scanner for the Mini Shai-Hulud npm/PyPI supply chain worm (NHS CC-4781 · CVE-2026-45321). Detects gh-token-monitor persistence, payload artefacts, and attacker commits. Python, Bash, PowerShell.