CVE-2024-49368

Nginx UI 漏洞利用设置 本指南概述了使用 Docker Compose 设置 Nginx UI、创建用户、运行漏洞利用以及验证 Docker 容器内结果的步骤。 前提条件 确保你的机器上已安装 Docker 和 Docker Compose。 熟悉基本的命令行操作。 通过 Docker 安装 nginx 1. 下载 docker-compose.yml 2. 验证你的 nginx.conf 文件是否包含以下行。 注意： 在 Linux Ubuntu 上，此文件位于 /etc/nginx/nginx.conf root@kitploit: http ... include...

CVE-2024-49368 Unchecked logrotate settings lead to arbitrary command execution

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.0.0-beta.36, when Nginx UI configures logrotate, it does not verify the input and directly passes it to exec.Command, causing arbitrary command execution. Version 2.0.0-beta.36 fixes this issue...

CVE-2024-49368 Unchecked logrotate settings lead to arbitrary command execution

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.0.0-beta.36, when Nginx UI configures logrotate, it does not verify the input and directly passes it to exec.Command, causing arbitrary command execution. Version 2.0.0-beta.36 fixes this issue...