flyniu666/ingress-nginx-0.21-1.19.5

PoC

based on nginx 1.19.5 to fix for CVE-2018-16843, CVE-2018-16844, CVE-2019-9511, CVE-2019-9513, and CVE-2019-9516

view exploit source poc_in_githubauthor flyniu666published 2020-12-22catalog poc_in_github
01

exploited CVEs (2)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2019-9511UShigh7.5Exploit
Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a l…
CVE-2018-16843UShigh7.5Exploit
nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive memory consumption. This issue affects nginx compiled with…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan