44 matches found
cve-2019-16278
CVE-2019-16278 これはCVE-2019-16278脆弱性のエクスプロイトです。 nhttpd サーバー v1.9.6 でリモートコード実行を可能にします。 ソースからのビルド このツールはRustで書かれています。Rustコンパイラをインストールする必要がありますが、ページの指示に従えば非常に簡単です。 コンパイル コンパイラと cargo がインストールされたら、次のコマンドを実行します： root@kitploit: cargo build 例 root@kitploit: ./cve-2019-16278 10.10.1.1 80 "cat /etc/passwd"...
CVE-2019-16278-PoC
CVE-2019-16728-PoC CVE-2019-16728 参考 https://git.sp0re.sh/sp0re/Nhttpd-exploits/src/branch/master/CVE-2019-16278.sh...
CVE-2019-16278
CVE-2019-16278 - Nostromo nhttpd 远程代码执行 漏洞描述 在 Nostromo nhttpd 版本 2&1 使用方法 root@kitploit: python3 cve-2019-16278.py...
CVE-2019-16278
CVE-2019-16278 一个简单快速的 Python 脚本，用于利用 CVE-2019-16278（Nostromo 1.9.6）中 httpverify 函数的目录遍历漏洞，通过精心构造的 HTTP 请求实现未授权的远程代码执行（RCE）。必需参数仅为主机和 Web 服务器端口，可选参数为要执行的命令（默认命令为 id）。 用法：nostroxploit.py host port command...
CVE-2019-16278
CVE-2019-16278 パストラバーサルの脆弱性により認証なしでRCEを引き起こすCVE-2019-16278を悪用するシンプルなPythonスクリプト。 使い方: python3 nostroSploit.py targetIP targetPort optional command to run 参考元: https://git.sp0re.sh/sp0re/Nhttpd-exploits/src/branch/master/CVE-2019-16278.sh...
cve-2019-16278
cve-2019-16278 Nhttpd Nostromo 1.9.6 由于目录遍历导致的远程代码执行 root@kitploit: git clone https://github.com/Kr0ff/cve-2019-16278...
CVE-2019-16279
A memory error in the function SSLaccept in nostromo nhttpd through 1.9.6 allows an attacker to trigger a denial of service via a crafted HTTP request...
CVE-2019-16278
Directory Traversal in the function httpverify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote code execution via a crafted HTTP request...
Exploit for Path Traversal in Nazgul Nostromo_Nhttpd
CVE-2019-16278 - Nostromo nhttpd RCE Vulnerability Descrip...
Nazgul Nostromo nhttpd < 2.1 Path Traversal Vulnerability
Nazgul Nostromo nhttpd is prone to a path traversal vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2022-48253
nhttpd in Nostromo before 2.1 is vulnerable to a path traversal that may allow an attacker to execute arbitrary commands on the remote server. The vulnerability occurs when the homedirs option is used...
Nazgul Nostromo nhttpd < 1.9.7 Multiple Directory Traversal Vulnerabilities
Nazgul Nostromo nhttpd is prone to multiple directory traversal vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Nostromo nhttpd Directory Traversal Vulnerability
Nostromo nhttpd contains a directory traversal vulnerability in the httpverify function in a non-chrooted nhttpd server allowing for remote code execution...
CVE-2022-48253
nhttpd in Nostromo before 2.1 is vulnerable to a path traversal that may allow an attacker to execute arbitrary commands on the remote server. The vulnerability occurs when the homedirs option is used...
CVE-2022-48253
nhttpd in Nostromo before 2.1 is vulnerable to a path traversal that may allow an attacker to execute arbitrary commands on the remote server. The vulnerability occurs when the homedirs option is used...
Path traversal
nhttpd in Nostromo before 2.1 is vulnerable to a path traversal that may allow an attacker to execute arbitrary commands on the remote server. The vulnerability occurs when the homedirs option is used...
nostromo 路径遍历漏洞
nostromo nhttpd is an open source web server. A security vulnerability exists in versions prior to Nostromo 2.1 that stems from a path traversal vulnerability in nhttpd that could allow an attacker to execute arbitrary commands on a remote server...
CVE-2022-48253
nhttpd in Nostromo before 2.1 is vulnerable to a path traversal that may allow an attacker to execute arbitrary commands on the remote server. The vulnerability occurs when the homedirs option is used...
CVE-2022-48253
CVE-2022-48253 describes a path traversal vulnerability in Nostromo’s web server component, nhttpd , for versions prior to 2.1. The root cause is a path traversal flaw triggered when the homedirs option is used, potentially enabling an attacker to execute arbitrary commands on a remote server. Pu...