Top all-time · #3876
depthfirst
Company blog · depthfirst.com/postsecurityai
depthfirst is the company blog at depthfirst.com, writing about security and ai. Since 2025, 19 different Hacker News readers have linked it 25 times, most often “Nginx Rift: RCE via heap buffer overflow in rewrite module (CVE-2026-42945)”. No feed was found, so read it on the site itself.
Too few sampled comments (4) to say how often HN recommends it.?
Why HN links it
HN readers link depthfirst's writeup on an 18-year-old critical Nginx vulnerability and its exploit proof of concept. The comments only share the links and discuss worker processes and ASLR.
Summarised by Claude from a sample of 4 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
AI agents that reason like an elite team of security researchers, continuously discovering and remediating risks across your code, dependencies, infrastructure, and production environment while preventing new risks from being introduced.
Most-linked posts?
- Nginx Rift: RCE via heap buffer overflow in rewrite module (CVE-2026-42945)5 people · 6 mentions · first linked 2026-05-13
- Nginx Rift: Remote Code Execution via an 18-Year-Old Vulnerability5 people · 5 mentions · first linked 2026-05-13
- Training SOTA vulnerability discovery agents through RL2 people · 2 mentions · first linked 2026-03-31
- Containers Are No Longer a Security Boundary2 people · 2 mentions · first linked 2026-09-23
What Hacker News says?
I'm deliberately refraining from giving a ready LLM prompt. History shows that "meh, ASLR mitigates this" is a vastly bolder claim anyway, so I don't feel much need to defend my position here. Edit: Even the authors of this poc seem to agree with me https://depthfirst.com/research/nginx-rift-achieving-nginx-r...
Comment linking /research/nginx-rift-achieving-nginx-rce-via-an-18-year-old-vulnerability
on “New Nginx Exploit”Submitted Casting a Net(ty) for Bugs, and Catching a Big One (CVE-2025-59419) as a story · 11 points
HN discussionWorker processes are forked from the master, which means they receive the same memory layout. You get unlimited crashes against the worker. There's probably a way to exploit that to get a read oracle. At the very least this is a reliable denial of service. Depth First's full writeup: https://depthfirst.com/research/nginx-rift-achieving-nginx-r...
Comment linking /research/nginx-rift-achieving-nginx-rce-via-an-18-year-old-vulnerability
on “New Nginx Exploit”Submitted Twenty One Zero-Days in FFmpeg as a story · 10 points
HN discussionBetter links: https://depthfirst.com/research/nginx-rift-achieving-nginx-r... ( https://news.ycombinator.com/item?id=48126029 ) https://depthfirst.com/nginx-rift ( https://news.ycombinator.com/item?id=48123365 )
Comment linking /nginx-rift
on “New Nginx Exploit”Submitted Supporting critical Open Source with $5M credits for vulnerability detection as a story · 8 points
HN discussionJust saw this pop up — full public PoC for CVE-2026-42945 ("NGINX Rift"), a heap buffer overflow in NGINX's ngx_http_rewrite_module that's been there since 0.6.27 (2008). It triggers on a very common pattern: a `rewrite` directive (with an unnamed capture like $1/$2 and a `?` in the replacement string) followed by `set`, `if`, or another `rewrite`. The root cause is a classic two-pass script engine bug (length calcu…
Comment linking /research/nginx-rift-achieving-nginx-rce-via-an-18-year-old-vulnerability
on “New Nginx Exploit”Submitted Containers Are No Longer a Security Boundary as a story · 6 points
HN discussionbetter links: https://depthfirst.com/research/nginx-rift-achieving-nginx-r... ( https://news.ycombinator.com/item?id=48126029 ) https://depthfirst.com/nginx-rift ( https://news.ycombinator.com/item?id=48123365 )
Comment linking /nginx-rift
on “18 year old critical vulnerability found in Nginx”Submitted Containers Are No Longer a Security Boundary as a story · 6 points
HN discussionSubmitted Masked namespace vulnerability in Temporal as a story · 6 points
HN discussionSubmitted Nginx Rift: RCE via heap buffer overflow in rewrite module (CVE-2026-42945) as a story · 4 points
HN discussionSubmitted Nginx Rift: Remote Code Execution via an 18-Year-Old Vulnerability as a story · 3 points
HN discussionSubmitted Nginx Rift as a story · 2 points
HN discussionSubmitted Training SOTA vulnerability discovery agents through RL as a story · 2 points
HN discussionSubmitted 1-Click RCE to steal your Moltbot data and keys as a story · 2 points
HN discussionSubmitted Esbuild XSS Bug That Survived 5B Downloads and Bypassed HTML Sanitization as a story · 2 points
HN discussionSubmitted DepthFirst: Continuous Cyber Defense as a story · 1 points
HN discussionSubmitted Nginx Rift as a story · 1 points
HN discussionSubmitted Nginx Rift Heap-based Buffer Overflow as a story · 1 points
HN discussionSubmitted Nginx Rift: Nginx Remote Code Execution via an 18-Year-Old Vulnerability as a story · 1 points
HN discussionSubmitted Cost Effective SOTA Vulnerability Detection with Open Source RL as a story · 1 points
HN discussionSubmitted LLM security agent finds vulnerability in LLM engineering platform as a story · 1 points
HN discussion
