0xjacky vulnerabilities
44 CVEs and advisories name 0xjacky as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-33027Nginx UI: Improper Path Validation Allows Recursive Deletion of the Nginx Configuration Directory
- CVE-2026-33028Nginx UI: Race Condition Leads to Persistent Data Corruption and Service Collapse
- CVE-2026-33029Nginx UI: DoS via Negative Integer Input in Logrotate Interval
- CVE-2026-33030Nginx UI: Unencrypted Storage of DNS API Tokens and ACME Private Keys
- CVE-2026-33032Nginx UI: Unauthenticated MCP Endpoint Allows Remote Nginx Takeover
- CVE-2026-27944Nginx UI: Unauthenticated Backup Download with Encryption Key Disclosure
- CVE-2024-49368Unchecked logrotate settings lead to arbitrary command execution
- CVE-2024-49367Nginx UI's log path can be controlled
- CVE-2024-49366Nginx UI's json field can construct a directory traversal payload, causing arbitrary files to be written
- CVE-2024-23828Nginx-UI authenticated RCE through injecting into the application config via CRLF
- CVE-2024-23827Nginx-UI arbitrary file write through the Import Certificate feature
- CVE-2024-22198Authenticated (user role) arbitrary command execution by modifying `start_cmd` setting (GHSL-2023-268)
- CVE-2024-22196Authenticated (user role) SQL injection in `OrderAndPaginate` (GHSL-2023-270)
- CVE-2024-22197Authenticated (user role) remote command execution by modifying `nginx` settings (GHSL-2023-269)