{"metadata": {"vulnerability": "CVE-2017-7529", "count": 117, "kinds": {"milestone": 22, "sighting": 13, "kev": 0, "other": 82}}, "data": [{"timestamp": "2017-04-05T00:00:00Z", "date_only": false, "value": "2017-04-05T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2017-7529", "field": "cveMetadata.dateReserved"}, {"timestamp": "2017-06-26T00:00:00Z", "date_only": false, "value": "2017-06-26T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2017:2538", "record": "RHSA-2017:2538", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2017-06-26T00:00:00Z", "date_only": false, "value": "2017-06-26T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2017_2538", "record": "RHSA-2017_2538", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2017-07-11T00:00:00Z", "date_only": false, "value": "2017-07-11T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201707-1309", "record": "VAR-201707-1309", "field": "sources_update_date.data.2.date"}, {"timestamp": "2017-07-11T00:00:00Z", "date_only": false, "value": "2017-07-11T00:00:00", "kind": "other", "label": "DATE PUBLIC", "source": "cvelistv5 / redhat", "record": "CVE-2017-7529", "field": "containers.cna.x_legacyV4Record.CVE_data_meta.DATE_PUBLIC"}, {"timestamp": "2017-07-11T00:00:00Z", "date_only": false, "value": "2017-07-11T00:00:00", "kind": "other", "label": "DATE PUBLIC", "source": "gsd \u00b7 GSD-2017-7529", "record": "GSD-2017-7529", "field": "namespaces.cve.org.CVE_data_meta.DATE_PUBLIC"}, {"timestamp": "2017-07-11T00:00:00Z", "date_only": false, "value": "2017-07-11T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / redhat", "record": "CVE-2017-7529", "field": "containers.cna.datePublic"}, {"timestamp": "2017-07-11T00:00:00Z", "date_only": false, "value": "2017-07-11T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2017-7529", "record": "UBUNTU-CVE-2017-7529", "field": "published"}, {"timestamp": "2017-07-11T00:00:00Z", "date_only": false, "value": "2017-07-11T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2017:2538", "record": "RHSA-2017:2538", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2017-07-11T00:00:00Z", "date_only": false, "value": "2017-07-11T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2017_2538", "record": "RHSA-2017_2538", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2017-07-12T00:00:00Z", "date_only": false, "value": "2017-07-12T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2017-AVI-211", "record": "CERTFR-2017-AVI-211", "field": "revisions.0.revision_date"}, {"timestamp": "2017-07-12T00:00:00Z", "date_only": true, "value": "2017-07-12", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2017-22747", "record": "CNVD-2017-22747", "field": "submitTime"}, {"timestamp": "2017-07-13T00:00:00Z", "date_only": false, "value": "2017-07-13T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201707-1309", "record": "VAR-201707-1309", "field": "sources_release_date.data.0.date"}, {"timestamp": "2017-07-13T13:00:00Z", "date_only": false, "value": "2017-07-13T13:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2017-7529", "field": "cveMetadata.datePublished"}, {"timestamp": "2017-07-13T13:29:00Z", "date_only": false, "value": "2017-07-13T13:29:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-85MJ-H68W-W736", "record": "GHSA-85MJ-H68W-W736", "field": "database_specific.nvd_published_at"}, {"timestamp": "2017-07-13T13:29:00Z", "date_only": false, "value": "2017-07-13T13:29Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2017-7529", "record": "GSD-2017-7529", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2017-07-13T13:29:00.220Z", "date_only": false, "value": "2017-07-13T13:29:00.220000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201707-1309", "record": "VAR-201707-1309", "field": "sources_release_date.data.8.date"}, {"timestamp": "2017-07-13T13:29:00.220Z", "date_only": false, "value": "2017-07-13T13:29:00.220", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2017-7529", "record": "FKIE_CVE-2017-7529", "field": "published"}, {"timestamp": "2017-07-14T02:15:51Z", "date_only": false, "value": "2017-07-14T02:15:51", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201707-1309", "record": "VAR-201707-1309", "field": "sources_release_date.data.5.date"}, {"timestamp": "2017-07-14T02:16:01Z", "date_only": false, "value": "2017-07-14T02:16:01", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201707-1309", "record": "VAR-201707-1309", "field": "sources_release_date.data.4.date"}, {"timestamp": "2017-08-17T00:00:00Z", "date_only": false, "value": "2017-08-17T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201707-1309", "record": "VAR-201707-1309", "field": "sources_update_date.data.3.date"}, {"timestamp": "2017-08-24T00:00:00Z", "date_only": true, "value": "2017-08-24", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2017-22747", "record": "CNVD-2017-22747", "field": "openTime"}, {"timestamp": "2017-08-28T21:24:00Z", "date_only": false, "value": "2017-08-28T21:24:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201707-1309", "record": "VAR-201707-1309", "field": "sources_release_date.data.6.date"}, {"timestamp": "2017-08-28T21:59:32Z", "date_only": false, "value": "2017-08-28T21:59:32+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2017:2538", "record": "RHSA-2017:2538", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2017-08-28T21:59:32Z", "date_only": false, "value": "2017-08-28T21:59:32+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2017_2538", "record": "RHSA-2017_2538", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2017-08-28T21:59:32Z", "date_only": false, "value": "2017-08-28T21:59:32+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2017:2538", "record": "RHSA-2017:2538", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2017-08-28T21:59:32Z", "date_only": false, "value": "2017-08-28T21:59:32+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2017_2538", "record": "RHSA-2017_2538", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2017-08-28T21:59:32Z", "date_only": false, "value": "2017-08-28T21:59:32+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2017:2538", "record": "RHSA-2017:2538", "field": "document.tracking.initial_release_date"}, {"timestamp": "2017-08-28T21:59:32Z", "date_only": false, "value": "2017-08-28T21:59:32+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2017_2538", "record": "RHSA-2017_2538", "field": "document.tracking.initial_release_date"}, {"timestamp": "2017-09-07T14:38:39Z", "date_only": false, "value": "2017-09-07T14:38:39Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2017:2387-1", "record": "SUSE-SU-2017:2387-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2017-09-07T14:38:39Z", "date_only": false, "value": "2017-09-07T14:38:39Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2017:2387-1", "record": "SUSE-SU-2017:2387-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2017-09-07T14:38:39Z", "date_only": false, "value": "2017-09-07T14:38:39Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2017:2387-1", "record": "SUSE-SU-2017:2387-1", "field": "document.tracking.generator.date"}, {"timestamp": "2017-09-07T14:38:39Z", "date_only": false, "value": "2017-09-07T14:38:39Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2017:2387-1", "record": "SUSE-SU-2017:2387-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2018-03-26T10:15:33Z", "date_only": false, "value": "2018-03-26T10:15:33Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2018:0813-1", "record": "OPENSUSE-SU-2018:0813-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2018-03-26T10:15:33Z", "date_only": false, "value": "2018-03-26T10:15:33Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2018:0813-1", "record": "OPENSUSE-SU-2018:0813-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2018-03-26T10:15:33Z", "date_only": false, "value": "2018-03-26T10:15:33Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2018:0813-1", "record": "OPENSUSE-SU-2018:0813-1", "field": "document.tracking.generator.date"}, {"timestamp": "2018-03-26T10:15:33Z", "date_only": false, "value": "2018-03-26T10:15:33Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2018:0813-1", "record": "OPENSUSE-SU-2018:0813-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2020-05-14T00:00:00Z", "date_only": false, "value": "2020-05-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-290", "record": "CERTFR-2020-AVI-290", "field": "revisions.0.revision_date"}, {"timestamp": "2020-05-18T00:00:00Z", "date_only": false, "value": "2020-05-18T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-290", "record": "CERTFR-2020-AVI-290", "field": "revisions.1.revision_date"}, {"timestamp": "2020-08-04T22:05:20Z", "date_only": false, "value": "2020-08-04T22:05:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/5wukRxV9URSUqaAjuIv1D5mVUIA9ZwDjV7wHja-KOPw3qxc", "record": "CVE-2017-7529", "field": "creation_timestamp", "uuid": "44856eec-6ea8-4ffa-b1d3-573bf1ab8049"}, {"timestamp": "2021-09-21T00:00:00Z", "date_only": false, "value": "2021-09-21T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-719", "record": "CERTFR-2021-AVI-719", "field": "revisions.0.revision_date"}, {"timestamp": "2021-09-21T06:42:54Z", "date_only": false, "value": "2021-09-21T06:42:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/pwnwiki_zhchannel/41", "record": "CVE-2017-7529", "field": "creation_timestamp", "uuid": "b7ca18ab-96a8-4441-b3ae-7843de19241d", "content": "CVE-2017-7529 Nginx\u8d8a\u754c\u8b80\u53d6\u7de9\u5b58\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2017-7529_Nginx%E8%B6%8A%E7%95%8C%E8%AE%80%E5%8F%96%E7%B7%A9%E5%AD%98%E6%BC%8F%E6%B4%9E", "url": "https://t.me/pwnwiki_zhchannel/41"}, {"timestamp": "2021-09-21T23:07:12Z", "date_only": false, "value": "2021-09-21T23:07:12.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / redhat", "record": "CVE-2017-7529", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-09-22T16:28:58Z", "date_only": false, "value": "2021-09-22T16:28:58", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201707-1309", "record": "VAR-201707-1309", "field": "sources_release_date.data.7.date"}, {"timestamp": "2021-11-10T00:00:00Z", "date_only": false, "value": "2021-11-10T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201707-1309", "record": "VAR-201707-1309", "field": "sources_update_date.data.0.date"}, {"timestamp": "2022-01-24T00:00:00Z", "date_only": false, "value": "2022-01-24T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201707-1309", "record": "VAR-201707-1309", "field": "sources_update_date.data.1.date"}, {"timestamp": "2022-01-24T16:46:00Z", "date_only": false, "value": "2022-01-24T16:46Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2017-7529", "record": "GSD-2017-7529", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-01-24T16:46:04.030Z", "date_only": false, "value": "2022-01-24T16:46:04.030000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201707-1309", "record": "VAR-201707-1309", "field": "sources_update_date.data.4.date"}, {"timestamp": "2022-05-13T01:04:15Z", "date_only": false, "value": "2022-05-13T01:04:15Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-85MJ-H68W-W736", "record": "GHSA-85MJ-H68W-W736", "field": "published"}, {"timestamp": "2022-05-13T01:04:15Z", "date_only": false, "value": "2022-05-13T01:04:15Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-85MJ-H68W-W736", "record": "GHSA-85MJ-H68W-W736", "field": "modified"}, {"timestamp": "2023-05-15T00:00:00Z", "date_only": false, "value": "2023-05-15T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201707-1309", "record": "VAR-201707-1309", "field": "sources_update_date.data.5.date"}, {"timestamp": "2023-07-06T08:57:12Z", "date_only": false, "value": "2023-07-06T08:57:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/critical_bug/1010", "record": "CVE-2017-7529", "field": "creation_timestamp", "uuid": "557d8718-55f9-4532-8d5b-7ab4696003f5", "content": "\ud83d\udfe1 Medium | \u0411\u0430\u0443\u043d\u0442\u0438: 100.0 | https://publishers.basicattentiontoken.org/favicon.ico \u0443\u044f\u0437\u0432\u0438\u043c \u043a CVE-2017-7529\n\n\u042d\u0442\u043e\u0442 \u0440\u0435\u043f\u043e\u0440\u0442 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438, \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0430\u0435\u043c\u043e\u0439 \u043a\u0430\u043a CVE-2017-7529. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u043c \u043d\u0435\u0433\u0430\u0442\u0438\u0432\u043d\u044b\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f\u043c \u0434\u043b\u044f \u0435\u0433\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0441 \u0438\u043c\u0435\u043d\u0435\u043c lalit2020 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u0432 \u0441\u0432\u043e\u0435\u043c \u0440\u0435\u043f\u043e\u0440\u0442\u0435, \u0447\u0442\u043e \u043e\u043d \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b, \u0447\u0442\u043e https://publishers.basicattentiontoken.org \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u043a \u044d\u0442\u043e\u0439 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041e\u043d \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e \u0441\u0430\u043c\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u043b\u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u0430\u0445 \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u043d\u043e \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043a\u0430\u043a \u0432\u044b\u0441\u043e\u043a\u0438\u0439.\n\n\u0420\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0440\u0435\u043f\u043e\u0440\u0442 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442, \u0447\u0442\u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043f\u0440\u0438\u043d\u044f\u0442\u044c \u043c\u0435\u0440\u044b \u0434\u043b\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u0438 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0435 \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u044f.", "url": "https://t.me/critical_bug/1010"}, {"timestamp": "2023-08-31T12:15:07.145Z", "date_only": false, "value": "2023-08-31T12:15:07.145802Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2017-7529", "record": "BELL-CVE-2017-7529", "field": "published"}, {"timestamp": "2023-08-31T12:15:07.145Z", "date_only": false, "value": "2023-08-31T12:15:07.145806Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2017-7529", "record": "BELL-CVE-2017-7529", "field": "modified"}, {"timestamp": "2023-08-31T12:15:07.145Z", "date_only": false, "value": "2023-08-31T12:15:07.145806Z", "kind": "other", "label": "Withdrawn", "source": "osv_bellsoft \u00b7 BELL-CVE-2017-7529", "record": "BELL-CVE-2017-7529", "field": "withdrawn"}, {"timestamp": "2023-12-13T01:21:06.911Z", "date_only": false, "value": "2023-12-13T01:21:06.911859Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2017-7529", "record": "GSD-2017-7529", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-18T11:53:03.181Z", "date_only": false, "value": "2023-12-18T11:53:03.181000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-201707-1309", "record": "VAR-201707-1309", "field": "last_update_date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11092-1", "record": "OPENSUSE-SU-2024:11092-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11341-1", "record": "OPENSUSE-SU-2024:11341-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11092-1", "record": "OPENSUSE-SU-2024:11092-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11341-1", "record": "OPENSUSE-SU-2024:11341-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11092-1", "record": "OPENSUSE-SU-2024:11092-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11341-1", "record": "OPENSUSE-SU-2024:11341-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11092-1", "record": "OPENSUSE-SU-2024:11092-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11341-1", "record": "OPENSUSE-SU-2024:11341-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-08-05T16:04:11.898Z", "date_only": false, "value": "2024-08-05T16:04:11.898Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2017-7529", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-16T18:39:56.411Z", "date_only": false, "value": "2024-09-16T18:39:56.411Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2017-7529", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-10-09T00:00:00Z", "date_only": true, "value": "2024-10-09", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0866", "record": "CERTFR-2024-AVI-0866", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2024-10-10T00:00:00Z", "date_only": false, "value": "2024-10-10T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0866", "record": "CERTFR-2024-AVI-0866", "field": "revisions.0.revision_date"}, {"timestamp": "2024-10-15T00:00:00Z", "date_only": true, "value": "2024-10-15", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0866", "record": "CERTFR-2024-AVI-0866", "field": "vendor_advisories.24.published_at"}, {"timestamp": "2024-10-16T00:00:00Z", "date_only": true, "value": "2024-10-16", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0866", "record": "CERTFR-2024-AVI-0866", "field": "vendor_advisories.15.published_at"}, {"timestamp": "2024-11-14T23:37:15Z", "date_only": false, "value": "2024-11-14T23:37:15+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2017_2538", "record": "RHSA-2017_2538", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2024-11-14T23:37:15Z", "date_only": false, "value": "2024-11-14T23:37:15+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2017_2538", "record": "RHSA-2017_2538", "field": "document.tracking.generator.date"}, {"timestamp": "2024-11-14T23:37:15Z", "date_only": false, "value": "2024-11-14T23:37:15+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2017_2538", "record": "RHSA-2017_2538", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-03-05T22:00:05Z", "date_only": false, "value": "2025-03-05T22:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/hCfCsWkJLNX-4ZZS6AKhD47aw1Wu0GxnlvM04EnHwON9-Gg", "record": "CVE-2017-7529", "field": "creation_timestamp", "uuid": "a06c06cf-54e8-4938-bc57-93926155e8d9"}, {"timestamp": "2025-04-27T23:00:06Z", "date_only": false, "value": "2025-04-27T23:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/hkqEFwwh606UEFPfmjcYFdm2vUfHHs20xhtGk7qU0l2VFRM", "record": "CVE-2017-7529", "field": "creation_timestamp", "uuid": "77f4a093-115c-46cd-8b8d-8d4fbcb14763"}, {"timestamp": "2025-09-08T16:44:11Z", "date_only": false, "value": "2025-09-08T16:44:11Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2017-7529", "record": "UBUNTU-CVE-2017-7529", "field": "modified"}, {"timestamp": "2026-01-30T17:13:56.781Z", "date_only": false, "value": "2026-01-30T17:13:56.781902Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-XB16901", "record": "CLEANSTART-2026-XB16901", "field": "published"}, {"timestamp": "2026-01-30T17:14:26.459Z", "date_only": false, "value": "2026-01-30T17:14:26.459138Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-BA37192", "record": "CLEANSTART-2026-BA37192", "field": "published"}, {"timestamp": "2026-02-18T00:40:43.959Z", "date_only": false, "value": "2026-02-18T00:40:43.959662Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-ZT77083", "record": "CLEANSTART-2026-ZT77083", "field": "published"}, {"timestamp": "2026-02-27T00:50:08.716Z", "date_only": false, "value": "2026-02-27T00:50:08.716833Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-ZN32454", "record": "CLEANSTART-2026-ZN32454", "field": "published"}, {"timestamp": "2026-04-01T09:58:43.603Z", "date_only": false, "value": "2026-04-01T09:58:43.603060Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-MQ02912", "record": "CLEANSTART-2026-MQ02912", "field": "published"}, {"timestamp": "2026-04-21T00:40:00.550Z", "date_only": false, "value": "2026-04-21T00:40:00.550928Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-AF45008", "record": "CLEANSTART-2026-AF45008", "field": "published"}, {"timestamp": "2026-06-17T01:24:32.470Z", "date_only": false, "value": "2026-06-17T01:24:32.470", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2017-7529", "record": "FKIE_CVE-2017-7529", "field": "lastModified"}, {"timestamp": "2026-06-28T12:22:55Z", "date_only": false, "value": "2026-06-28T12:22:55+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2017:2538", "record": "RHSA-2017:2538", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-06-28T12:22:55Z", "date_only": false, "value": "2026-06-28T12:22:55+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2017:2538", "record": "RHSA-2017:2538", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-28T12:22:55Z", "date_only": false, "value": "2026-06-28T12:22:55+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2017:2538", "record": "RHSA-2017:2538", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-01T20:01:01.313Z", "date_only": false, "value": "2026-09-01T20:01:01.313227Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/95785", "record": "CVE-2017-7529", "field": "creation_timestamp", "uuid": "911523d0-4666-4309-91c5-b2a1e8be163d", "content": "Black Hat Ethical Hacking\nOffensive Security Tool: Nginxpwner\n\nOffensive Security Tool: NginxpwnerPost Views: 139 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 2 Minutes DescriptionNginxpwner is written by stark0de and its an automated tool written in Python that can be used to scan a web server running the nginx web server software for misconfigurations and vulnerabilities. The tool uses a variety of techniques to identify misconfigurations and vulnerabilities, such as looking for files with default or weak permissions, searching for backup files, and checking for common server configuration mistakes. Once the tool identifies a vulnerability, it attempts to exploit it by running a variety of pre-configured attacks against the server, such as using a local file inclusion (LFI) vulnerability to retrieve sensitive files or attempting to execute arbitrary code on the server.\n\nIt can also be used to perform reconnaissance on a target server, such as identifying the operating system and web server software in use. It is important to note that while the tool can be useful for identifying potential security issues on a web server, it should only be used on systems that you have explicit permission to test.\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/68747470733a2f2f692e706f7374696d672e63632f766d334c57466a342f6e67696e7870776e65722e706e67-1024x350.png \nSee Also: So you want to be a hacker? Offensive Security Courses Installcd /optgit clone https://github.com/stark0de/nginxpwnercd nginxpwnerchmod +x install.sh./install.shTrending: Offensive Security Tool: Bypass Url Parser\nTrending: Digital Forensics Tool: Email Analyzer Install using Dockergit clone https://github.com/stark0de/nginxpwnercd nginxpwnersudo docker build -t nginxpwner:latest .Run the imagesudo docker run -it nginxpwner:latest /bin/bashUsageTarget tab in Burp, select host, right click, copy all URLs in this host, copy to a file\n\ncat urllist | unfurl paths | cut -d\"/\" -f2-3 | sort -u > /tmp/pathlist \n\nOr get the list of paths you already discovered in the application in some other way. Note: the paths should not start with /\n\nFinally:\n\npython3 nginxpwner.py https://example.com /tmp/pathlistSee Also: Write up: How Misconfigurations in Linux can leave you vulnerable to Attackers NotesIt actually checks for:\n\n-Gets Ngnix version and gets its possible exploits using searchsploit and tells if it is outdated\n\n-Throws a wordlist specific to Nginx via gobuster\n\n-Checks if it is vulnerable to CRLF via a common misconfiguration of using $uri in redirects\n\n-Checks for CRLF in all of the paths provided\n\n-Checks if the PURGE HTTP method is available from the outside\n\n-Checks for variable leakage misconfiguration\n\n-Checks for path traversal vulnerabilities via merge_slashes set to off\n\n-Tests for differences in the length of responses when using hop-by-hop headers (ex: X-Forwarded-Host)\n\n-Uses Kyubi to test for path traversal vulnerabilities via misconfigured alias\n\n-Tests for 401/403 bypass using X-Accel-Redirect\n\n-Shows the payload to check for Raw backend reading response misconfiguration\n\n-Checks if the site uses PHP and suggests some nginx-specific tests for PHP sites\n\n-Tests for the common integer overflow vulnerability in Nginx\u2019s range filter module (CVE-2017-7529)\n\nThe tool uses the Server header in the response to do some of the tests. There are other CMS and so which are built on Nginx like Centminmod, OpenResty, Pantheon or Tengine for example which don\u2019t return that header. In that case please use nginx-pwner-no-server-header.py w[...]", "url": "https://t.me/hacking_Attack/95785"}, {"timestamp": "2026-09-01T20:02:44.591Z", "date_only": false, "value": "2026-09-01T20:02:44.591136Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/7079", "record": "CVE-2017-7529", "field": "creation_timestamp", "uuid": "879181d3-bd08-458f-9ad3-4b4d2720c827", "content": "KitPloit - PenTest Tools!\nNginxpwner - Tool to look for common Nginx misconfigurations and vulnerabilities\n\nhttps://1.bp.blogspot.com/-Dttz0B-9i6E/YIxZwJFPPBI/AAAAAAAAWCQ/B1twiYSSfHYygiShhLZqejH7f8nB1Nr5ACNcBGAsYHQ/w640-h218/nginxpwner_1.png \nNginxpwner is a simple tool to look for common Nginx misconfigurations and vulnerabilities.\nInstall:\ncd /opt\ngit clone https://github.com/stark0de/nginxpwner\ncd nginxpwner\nchmod +x install.sh\n./install.sh\n\nUsage:\nTarget tab in Burp, select host, right click, copy all URLs in this host, copy to a file\n\ncat urllist | unfurl paths | cut -d\"/\" -f2-3 | sort -u > /tmp/pathlist \n\nOr get the list of paths you already discovered in the application in some other way. Note: the paths should not start with /\n\nFinally:\n\npython3 nginxpwner.py https://example.com /tmp/pathlist\n\nNotes:\n\nIt actually checks for:\n\n-Gets Ngnix version and gets its possible exploits using searchsploit and tells if it is outdated\n\n-Throws a wordlist specific to Nginx via gobuster\n\n-Checks if it is vulnerable to CRLF via a common misconfiguration of using $uri in redirects\n\n-Checks for CRLF in all of the paths provided\n\n-Checks if the PURGE HTTP method is available from the outside\n\n-Checks for variable leakage misconfiguration\n\n-Checks for path traversal vulnerabilities via merge_slashes set to off\n\n-Tests for differences in the length of requests when using hop-by-hop headers (ex: X-Forwarded-Host)\n\n-Uses Kyubi to test for path traversal vulnerabilities via misconfigured alias\n\n-Tests for 401/403 bypass using X-Accel-Redirect\n\n-Shows the payload to check for Raw backend reading response misconfiguration\n\n-Checks if the site uses PHP and suggests some nginx-specific tests for PHP sites\n\n-Tests for the common integer overflow vulnerability in Nginx's range filter module (CVE-2017-7529)\n\nThe tool uses the Server header in the response to do some of the tests. There are other CMS and so which are built on Nginx like Centminmod, OpenResty, Pantheon or Tengine for example which don't return that header. In that case please use nginx-pwner-no-server-header.py with the same parameters than the other script\n\nAlso, for the exploit search to run correctly you should do: searchsploit -u in Kali from time to time\n\nThe tool does not check for web cache poisoning/deception vulnerabilities nor request smuggling, you should test that with specific tools for those vulnerabilities. NginxPwner is mainly focused in misconfigurations developers may have introduced in the nginx.conf without being aware of them.\n\nCredit to shibli2700 for his awesome tool Kyubi https://github.com/shibli2700/Kyubi and to all the contributors of gobuster. Credits also to Detectify (which actually discovered many of this misconfigurations in NGINX)\nDownload Nginxpwner\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "url": "https://t.me/hacking_Attack/7079"}, {"timestamp": "2026-09-01T20:02:44.869Z", "date_only": false, "value": "2026-09-01T20:02:44.869104Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/7073", "record": "CVE-2017-7529", "field": "creation_timestamp", "uuid": "0bf16065-6ee4-4e81-b7e7-2d8143b534d5", "content": "Nginxpwner -  Tool to look for common Nginx misconfigurations and vulnerabilities\n\n Nginxpwner is a simple tool to look for common Nginx misconfigurations and vulnerabilities.Install: cd /optgit clone https://github.com/stark0de/nginxpwnercd nginxpwnerchmod +x install.sh./install.sh Usage: Target tab in Burp, select host, right click, copy all URLs in this host, copy to a filecat urllist | unfurl paths | cut -d\"/\" -f2-3 | sort -u > /tmp/pathlist Or get the list of paths you already discovered in the application in some other way. Note: the paths should not start with /Finally:python3 nginxpwner.py https://example.com /tmp/pathlist Notes: It actually checks for: -Gets Ngnix version and gets its possible exploits using searchsploit and tells if it is outdated -Throws a wordlist specific to Nginx via gobuster -Checks if it is vulnerable to CRLF via a common misconfiguration of using $uri in redirects -Checks for CRLF in all of the paths provided -Checks if the PURGE HTTP method is available from the outside -Checks for variable leakage misconfiguration -Checks for path traversal vulnerabilities via merge_slashes set to off -Tests for differences in the length of requests when using hop-by-hop headers (ex: X-Forwarded-Host) -Uses Kyubi to test for path traversal vulnerabilities via misconfigured alias -Tests for 401/403 bypass using X-Accel-Redirect -Shows the payload to check for Raw backend reading response misconfiguration -Checks if the site uses PHP and suggests some nginx-specific tests for PHP sites -Tests for the common integer overflow vulnerability in Nginx's range filter module (CVE-2017-7529) The tool uses the Server header in the response to do some of the tests. There are other CMS and so which are built on Nginx like Centminmod, OpenResty, Pantheon or Tengine for example which don't return that header. In that case please use nginx-pwner-no-server-header.py with the same parameters than the other script Also, for the exploit search to run correctly you should do: searchsploit -u in Kali from time to time The tool does not check for web cache poisoning/deception vulnerabilities nor request smuggling, you should test that with specific tools for those vulnerabilities. NginxPwner is mainly focused in misconfigurations developers may have introduced in the nginx.conf without being aware of them. Credit to shibli2700 for his awesome tool Kyubi https://github.com/shibli2700/Kyubi and to all the contributors of gobuster. Credits also to Detectify (which actually discovered many of this misconfigurations in NGINX) Download Nginxpwner\nRead more...\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "url": "https://t.me/hacking_Attack/7073"}, {"timestamp": "2026-09-04T19:00:05.125Z", "date_only": false, "value": "2026-09-04T19:00:05.125701Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/95785", "record": "CVE-2017-7529", "field": "creation_timestamp", "uuid": "33916bc3-95dc-4c5f-a0f4-08e3e3b66b5a", "content": "Black Hat Ethical Hacking\nOffensive Security Tool: Nginxpwner\n\nOffensive Security Tool: NginxpwnerPost Views: 139 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 2 Minutes DescriptionNginxpwner is written by stark0de and its an automated tool written in Python that can be used to scan a web server running the nginx web server software for misconfigurations and vulnerabilities. The tool uses a variety of techniques to identify misconfigurations and vulnerabilities, such as looking for files with default or weak permissions, searching for backup files, and checking for common server configuration mistakes. Once the tool identifies a vulnerability, it attempts to exploit it by running a variety of pre-configured attacks against the server, such as using a local file inclusion (LFI) vulnerability to retrieve sensitive files or attempting to execute arbitrary code on the server.\n\nIt can also be used to perform reconnaissance on a target server, such as identifying the operating system and web server software in use. It is important to note that while the tool can be useful for identifying potential security issues on a web server, it should only be used on systems that you have explicit permission to test.\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/68747470733a2f2f692e706f7374696d672e63632f766d334c57466a342f6e67696e7870776e65722e706e67-1024x350.png \nSee Also: So you want to be a hacker? Offensive Security Courses Installcd /optgit clone https://github.com/stark0de/nginxpwnercd nginxpwnerchmod +x install.sh./install.shTrending: Offensive Security Tool: Bypass Url Parser\nTrending: Digital Forensics Tool: Email Analyzer Install using Dockergit clone https://github.com/stark0de/nginxpwnercd nginxpwnersudo docker build -t nginxpwner:latest .Run the imagesudo docker run -it nginxpwner:latest /bin/bashUsageTarget tab in Burp, select host, right click, copy all URLs in this host, copy to a file\n\ncat urllist | unfurl paths | cut -d\"/\" -f2-3 | sort -u > /tmp/pathlist \n\nOr get the list of paths you already discovered in the application in some other way. Note: the paths should not start with /\n\nFinally:\n\npython3 nginxpwner.py https://example.com /tmp/pathlistSee Also: Write up: How Misconfigurations in Linux can leave you vulnerable to Attackers NotesIt actually checks for:\n\n-Gets Ngnix version and gets its possible exploits using searchsploit and tells if it is outdated\n\n-Throws a wordlist specific to Nginx via gobuster\n\n-Checks if it is vulnerable to CRLF via a common misconfiguration of using $uri in redirects\n\n-Checks for CRLF in all of the paths provided\n\n-Checks if the PURGE HTTP method is available from the outside\n\n-Checks for variable leakage misconfiguration\n\n-Checks for path traversal vulnerabilities via merge_slashes set to off\n\n-Tests for differences in the length of responses when using hop-by-hop headers (ex: X-Forwarded-Host)\n\n-Uses Kyubi to test for path traversal vulnerabilities via misconfigured alias\n\n-Tests for 401/403 bypass using X-Accel-Redirect\n\n-Shows the payload to check for Raw backend reading response misconfiguration\n\n-Checks if the site uses PHP and suggests some nginx-specific tests for PHP sites\n\n-Tests for the common integer overflow vulnerability in Nginx\u2019s range filter module (CVE-2017-7529)\n\nThe tool uses the Server header in the response to do some of the tests. There are other CMS and so which are built on Nginx like Centminmod, OpenResty, Pantheon or Tengine for example which don\u2019t return that header. In that case please use nginx-pwner-no-server-header.py w[...]", "url": "https://t.me/hacking_Attack/95785"}, {"timestamp": "2026-09-08T08:00:05.636Z", "date_only": false, "value": "2026-09-08T08:00:05.636018Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/7073", "record": "CVE-2017-7529", "field": "creation_timestamp", "uuid": "8e55570e-443c-4d4e-8b38-6fcf39afcc73", "content": "Nginxpwner -  Tool to look for common Nginx misconfigurations and vulnerabilities\n\n Nginxpwner is a simple tool to look for common Nginx misconfigurations and vulnerabilities.Install: cd /optgit clone https://github.com/stark0de/nginxpwnercd nginxpwnerchmod +x install.sh./install.sh Usage: Target tab in Burp, select host, right click, copy all URLs in this host, copy to a filecat urllist | unfurl paths | cut -d\"/\" -f2-3 | sort -u > /tmp/pathlist Or get the list of paths you already discovered in the application in some other way. Note: the paths should not start with /Finally:python3 nginxpwner.py https://example.com /tmp/pathlist Notes: It actually checks for: -Gets Ngnix version and gets its possible exploits using searchsploit and tells if it is outdated -Throws a wordlist specific to Nginx via gobuster -Checks if it is vulnerable to CRLF via a common misconfiguration of using $uri in redirects -Checks for CRLF in all of the paths provided -Checks if the PURGE HTTP method is available from the outside -Checks for variable leakage misconfiguration -Checks for path traversal vulnerabilities via merge_slashes set to off -Tests for differences in the length of requests when using hop-by-hop headers (ex: X-Forwarded-Host) -Uses Kyubi to test for path traversal vulnerabilities via misconfigured alias -Tests for 401/403 bypass using X-Accel-Redirect -Shows the payload to check for Raw backend reading response misconfiguration -Checks if the site uses PHP and suggests some nginx-specific tests for PHP sites -Tests for the common integer overflow vulnerability in Nginx's range filter module (CVE-2017-7529) The tool uses the Server header in the response to do some of the tests. There are other CMS and so which are built on Nginx like Centminmod, OpenResty, Pantheon or Tengine for example which don't return that header. In that case please use nginx-pwner-no-server-header.py with the same parameters than the other script Also, for the exploit search to run correctly you should do: searchsploit -u in Kali from time to time The tool does not check for web cache poisoning/deception vulnerabilities nor request smuggling, you should test that with specific tools for those vulnerabilities. NginxPwner is mainly focused in misconfigurations developers may have introduced in the nginx.conf without being aware of them. Credit to shibli2700 for his awesome tool Kyubi https://github.com/shibli2700/Kyubi and to all the contributors of gobuster. Credits also to Detectify (which actually discovered many of this misconfigurations in NGINX) Download Nginxpwner\nRead more...\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "url": "https://t.me/hacking_Attack/7073"}, {"timestamp": "2026-09-08T08:00:05.918Z", "date_only": false, "value": "2026-09-08T08:00:05.918920Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/7079", "record": "CVE-2017-7529", "field": "creation_timestamp", "uuid": "e2a1441a-da38-41d3-83d4-5964785d2e68", "content": "KitPloit - PenTest Tools!\nNginxpwner - Tool to look for common Nginx misconfigurations and vulnerabilities\n\nhttps://1.bp.blogspot.com/-Dttz0B-9i6E/YIxZwJFPPBI/AAAAAAAAWCQ/B1twiYSSfHYygiShhLZqejH7f8nB1Nr5ACNcBGAsYHQ/w640-h218/nginxpwner_1.png \nNginxpwner is a simple tool to look for common Nginx misconfigurations and vulnerabilities.\nInstall:\ncd /opt\ngit clone https://github.com/stark0de/nginxpwner\ncd nginxpwner\nchmod +x install.sh\n./install.sh\n\nUsage:\nTarget tab in Burp, select host, right click, copy all URLs in this host, copy to a file\n\ncat urllist | unfurl paths | cut -d\"/\" -f2-3 | sort -u > /tmp/pathlist \n\nOr get the list of paths you already discovered in the application in some other way. Note: the paths should not start with /\n\nFinally:\n\npython3 nginxpwner.py https://example.com /tmp/pathlist\n\nNotes:\n\nIt actually checks for:\n\n-Gets Ngnix version and gets its possible exploits using searchsploit and tells if it is outdated\n\n-Throws a wordlist specific to Nginx via gobuster\n\n-Checks if it is vulnerable to CRLF via a common misconfiguration of using $uri in redirects\n\n-Checks for CRLF in all of the paths provided\n\n-Checks if the PURGE HTTP method is available from the outside\n\n-Checks for variable leakage misconfiguration\n\n-Checks for path traversal vulnerabilities via merge_slashes set to off\n\n-Tests for differences in the length of requests when using hop-by-hop headers (ex: X-Forwarded-Host)\n\n-Uses Kyubi to test for path traversal vulnerabilities via misconfigured alias\n\n-Tests for 401/403 bypass using X-Accel-Redirect\n\n-Shows the payload to check for Raw backend reading response misconfiguration\n\n-Checks if the site uses PHP and suggests some nginx-specific tests for PHP sites\n\n-Tests for the common integer overflow vulnerability in Nginx's range filter module (CVE-2017-7529)\n\nThe tool uses the Server header in the response to do some of the tests. There are other CMS and so which are built on Nginx like Centminmod, OpenResty, Pantheon or Tengine for example which don't return that header. In that case please use nginx-pwner-no-server-header.py with the same parameters than the other script\n\nAlso, for the exploit search to run correctly you should do: searchsploit -u in Kali from time to time\n\nThe tool does not check for web cache poisoning/deception vulnerabilities nor request smuggling, you should test that with specific tools for those vulnerabilities. NginxPwner is mainly focused in misconfigurations developers may have introduced in the nginx.conf without being aware of them.\n\nCredit to shibli2700 for his awesome tool Kyubi https://github.com/shibli2700/Kyubi and to all the contributors of gobuster. Credits also to Detectify (which actually discovered many of this misconfigurations in NGINX)\nDownload Nginxpwner\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "url": "https://t.me/hacking_Attack/7079"}, {"timestamp": "2026-09-09T10:55:12Z", "date_only": false, "value": "2026-09-09T10:55:12Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-BA37192", "record": "CLEANSTART-2026-BA37192", "field": "modified"}, {"timestamp": "2026-09-09T10:55:12Z", "date_only": false, "value": "2026-09-09T10:55:12Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-MQ02912", "record": "CLEANSTART-2026-MQ02912", "field": "modified"}, {"timestamp": "2026-09-09T10:55:12Z", "date_only": false, "value": "2026-09-09T10:55:12Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-ZN32454", "record": "CLEANSTART-2026-ZN32454", "field": "modified"}, {"timestamp": "2026-09-09T10:55:12Z", "date_only": false, "value": "2026-09-09T10:55:12Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-ZT77083", "record": "CLEANSTART-2026-ZT77083", "field": "modified"}, {"timestamp": "2026-09-09T10:55:12Z", "date_only": false, "value": "2026-09-09T10:55:12Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-BA37192", "record": "CLEANSTART-2026-BA37192", "field": "withdrawn"}, {"timestamp": "2026-09-09T10:55:12Z", "date_only": false, "value": "2026-09-09T10:55:12Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-MQ02912", "record": "CLEANSTART-2026-MQ02912", "field": "withdrawn"}, {"timestamp": "2026-09-09T10:55:12Z", "date_only": false, "value": "2026-09-09T10:55:12Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-ZN32454", "record": "CLEANSTART-2026-ZN32454", "field": "withdrawn"}, {"timestamp": "2026-09-09T10:55:12Z", "date_only": false, "value": "2026-09-09T10:55:12Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-ZT77083", "record": "CLEANSTART-2026-ZT77083", "field": "withdrawn"}, {"timestamp": "2026-09-18T04:00:08.205Z", "date_only": false, "value": "2026-09-18T04:00:08.205950Z", "kind": "sighting", "label": "Seen", "source": "Telegram/fjZvNReB1UWIVjHq7mUHd7jlExE07it3dmo5byOyMue5zSk", "record": "CVE-2017-7529", "field": "creation_timestamp", "uuid": "ae141778-0b8a-4c64-86e2-506e4a5fd03a"}, {"timestamp": "2026-09-18T10:30:39.403Z", "date_only": false, "value": "2026-09-18T10:30:39.403918Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-IH30576", "record": "CLEANSTART-2026-IH30576", "field": "published"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-AF45008", "record": "CLEANSTART-2026-AF45008", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-XB16901", "record": "CLEANSTART-2026-XB16901", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-AF45008", "record": "CLEANSTART-2026-AF45008", "field": "withdrawn"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-XB16901", "record": "CLEANSTART-2026-XB16901", "field": "withdrawn"}, {"timestamp": "2026-09-19T00:00:25.457Z", "date_only": false, "value": "2026-09-19T00:00:25.457678Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/fjZvNReB1UWIVjHq7mUHd7jlExE07it3dmo5byOyMue5zSk", "record": "CVE-2017-7529", "field": "creation_timestamp", "uuid": "4cef8df6-a446-4bd9-be2e-697749a6f765"}, {"timestamp": "2026-09-20T12:31:30Z", "date_only": false, "value": "2026-09-20T12:31:30Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2017:2387-1", "record": "SUSE-SU-2017:2387-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T12:31:30Z", "date_only": false, "value": "2026-09-20T12:31:30Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2017:2387-1", "record": "SUSE-SU-2017:2387-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T18:45:42Z", "date_only": false, "value": "2026-09-20T18:45:42Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2018:0813-1", "record": "OPENSUSE-SU-2018:0813-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T18:45:42Z", "date_only": false, "value": "2026-09-20T18:45:42Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2018:0813-1", "record": "OPENSUSE-SU-2018:0813-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T20:11:14Z", "date_only": false, "value": "2026-09-20T20:11:14Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11092-1", "record": "OPENSUSE-SU-2024:11092-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T20:11:14Z", "date_only": false, "value": "2026-09-20T20:11:14Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11092-1", "record": "OPENSUSE-SU-2024:11092-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T20:16:34Z", "date_only": false, "value": "2026-09-20T20:16:34Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11341-1", "record": "OPENSUSE-SU-2024:11341-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T20:16:34Z", "date_only": false, "value": "2026-09-20T20:16:34Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11341-1", "record": "OPENSUSE-SU-2024:11341-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-08T19:44:55Z", "date_only": false, "value": "2026-10-08T19:44:55Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-IH30576", "record": "CLEANSTART-2026-IH30576", "field": "modified"}]}