DepthFirstDisclosures/Nginx-Rift

NGINX RCE exploits

Python

931

186

1 contributors

FeaturedAdvertise to 180K+ monthly visitors

Control what AI can do before it acts

Enterprise AI Gateway Built For Scale: Route, Govern, and Secure All Your AI Traffic

Momentum

How fast DepthFirstDisclosures/Nginx-Rift is gaining stars, and where it lands on Trendshift and GitHub Trending

Activity and trending

Stars, forks and merged pull requests each day or month, lined up with the repository's rank on Trendshift Trending

Aug 20 – Oct 18, 2026

Stars +19 in 60 days

2

Forks +4 in 60 days

1

Merged PRs 0 in 60 days

Trendshift Trendingwhere the repository ranked each day it made the top 25

Not in the Trendshift top 25 in this period

Aug 20Aug 28Sep 5Sep 13Sep 21Sep 29Oct 7Oct 15

Stars, forks, merged pull requests and Trendshift Trending rank, by day
Day	Stars gained	Forks gained	Merged PRs
Thu, Aug 20, 2026	+0	+0	0
Fri, Aug 21, 2026	+0	+0	0
Sat, Aug 22, 2026	+0	+0	0
Sun, Aug 23, 2026	+1	+0	0
Mon, Aug 24, 2026	+0	+0	0
Tue, Aug 25, 2026	+1	+0	0
Wed, Aug 26, 2026	+1	+0	0
Thu, Aug 27, 2026	+0	+0	0
Fri, Aug 28, 2026	+0	+1	0
Sat, Aug 29, 2026	+0	+0	0
Sun, Aug 30, 2026	+1	+0	0
Mon, Aug 31, 2026	+1	+0	0
Tue, Sep 1, 2026	+1	+0	0
Wed, Sep 2, 2026	+0	+0	0
Thu, Sep 3, 2026	+0	+0	0
Fri, Sep 4, 2026	+0	+0	0
Sat, Sep 5, 2026	+0	+0	0
Sun, Sep 6, 2026	+0	+0	0
Mon, Sep 7, 2026	+0	+0	0
Tue, Sep 8, 2026	+0	+0	0
Wed, Sep 9, 2026	+1	+0	0
Thu, Sep 10, 2026	+1	+0	0
Fri, Sep 11, 2026	+0	+0	0
Sat, Sep 12, 2026	+0	+0	0
Sun, Sep 13, 2026	+0	+0	0
Mon, Sep 14, 2026	+2	+0	0
Tue, Sep 15, 2026	+0	+0	0
Wed, Sep 16, 2026	+0	+0	0
Thu, Sep 17, 2026	+0	+0	0
Fri, Sep 18, 2026	+0	+0	0
Sat, Sep 19, 2026	+0	+0	0
Sun, Sep 20, 2026	+0	+0	0
Mon, Sep 21, 2026	+0	+0	0
Tue, Sep 22, 2026	+0	+0	0
Wed, Sep 23, 2026	+0	+0	0
Thu, Sep 24, 2026	+1	+0	0
Fri, Sep 25, 2026	+1	+0	0
Sat, Sep 26, 2026	+0	+0	0
Sun, Sep 27, 2026	+0	+0	0
Mon, Sep 28, 2026	+0	+0	0
Tue, Sep 29, 2026	+1	+1	0
Wed, Sep 30, 2026	+0	+0	0
Thu, Oct 1, 2026	+0	+0	0
Fri, Oct 2, 2026	+1	+0	0
Sat, Oct 3, 2026	+0	+0	0
Sun, Oct 4, 2026	+0	+0	0
Mon, Oct 5, 2026	+0	+0	0
Tue, Oct 6, 2026	+0	+0	0
Wed, Oct 7, 2026	+0	+0	0
Thu, Oct 8, 2026	+1	+0	0
Fri, Oct 9, 2026	+0	+0	0
Sat, Oct 10, 2026	+0	+0	0
Sun, Oct 11, 2026	+0	+0	0
Mon, Oct 12, 2026	+0	+1	0
Tue, Oct 13, 2026	+1	+1	0
Wed, Oct 14, 2026	+2	+0	0
Thu, Oct 15, 2026	+0	+0	0
Fri, Oct 16, 2026	+0	+0	0
Sat, Oct 17, 2026	+1	+0	0
Sun, Oct 18, 2026	+0	+0	0
Total	+19	+4	0

#1 on the list
Rank that day
Not trending

Mentions and achievements

Where people are talking about DepthFirstDisclosures/Nginx-Rift, and every badge it has earned

Jul 251 post
- Open-sourcing our RCE implementation for CVE-2026-42533! This is an incredibly powerful NGINX bug that provides both info leak and an out-of-bounds heap write primitives (so, yes, ASLR bypass!). F5…
  Read full on X, posted by @Markak_
  @Markak_ · x.com
2 months earlier
Jun 31 post
- I used to think the first AI disaster would be some sort of wide scale fraud - Nigerian prince but more sophisticated. seems more likely now that AI-discovered RCE exploits will hit the fan first
  Read full on X, posted by @rough__sea
  @rough__sea · x.com
12 days earlier
May 221 post
- ⚠️CVE-2026-42945: RCE Proof of concept for CVE-2026-42945, a critical heap buffer overflow in NGINX's ngx_http_rewrite_module introduced in 2008 GitHub:
  Read full on X, posted by @Anastasis_King
  @Anastasis_King · x.com
May 181 post
- Every time a critical nginx CVE drops, the same thing plays out. Your $30/hr freelancer doesn't see it. Your in-house dev sees it tomorrow. The agency on retainer patched it before you woke up.
  Read full on X, posted by @cmdcntr
  @cmdcntr · x.com
May 151 post5 posts
- GitHub - DepthFirstDisclosures/Nginx-Rift: exploit for CVE-2026-42945 · GitHub
  Read full on X, posted by @Mas73r
  @Mas73r · x.com
- UPDATE: 19 MILLION exposed NGINX instances hit by the 18-year-old NGINX RCE found by AI. A bug from 2008 just got a working exploit. CVE-2026-42945 (CVSS 9.2) No login. No access. Just one HTTP…
  Read full on X, posted by @1024Cyber
  @1024Cyber · x.com
- UPDATE: 19 MILLION exposed NGINX instances hit by the 18-year-old NGINX RCE found by AI. A bug from 2008 just got a working exploit. CVE-2026-42945 (CVSS 9.2) No login. No access. Just one HTTP…
  Read full on X, posted by @1024Cyber
  @1024Cyber · x.com
- NGINX Rift RCE Proof of concept for CVE-2026-42945, a critical heap buffer overflow in NGINX's ngx_http_rewrite_module introduced in 2008. The bug enables unauthenticated remote code execution…
  Read full on X, posted by @nethemba
  @nethemba · x.com
- DepthFirstDisclosures/Nginx-Rift: exploit for CVE-2026-42945
  Read full on X, posted by @chrmina
  @chrmina · x.com
May 141 post
- GitHub - DepthFirstDisclosures/Nginx-Rift: exploit for CVE-2026-42945 · GitHub
  Read full on X, posted by @N0tus3rF0und
  @N0tus3rF0und · x.com