CVE-2019-16278

CVE-2019-16278 A simple and quick python script to exploit CVE-2019-16278 Nostromo 1.9.6 from a Directory Traversal vulnerability in the function httpverify in Nostromo nhttpd that leads to unauthenticated RCE via a crafted HTTP request. Only takes in host and port of web server as required...

nostromo nhttpd RCE (CVE-2019-16278)

Exploits CVE-2019-16278 directory traversal in httpverify to invoke /bin/sh on nostromo nhttpd = 1.9.6. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """nostromo nhttpd path traversal RCE CVE-2019-16278 — execute session.""" from future import annotations import ...

nostromo 1.9.6 - Remote Code Execution Detection

nostromo nhttpd through 1.9.6 allows an attacker to achieve remote code execution via directory traversal in the function httpverify. !/usr/bin/env python3 -- coding: utf-8 -- """nostromo nhttpd through 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient...

VulnCheck KEV: CVE-2019-16278

Nostromo nhttpd contains a directory traversal vulnerability in the httpverify function in a non-chrooted nhttpd server allowing for remote code execution...

CVE-2019-16278

Directory Traversal in the function httpverify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote code execution via a crafted HTTP request. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

CVE-2019-16278: Improper Limitation of a Pathname to a Restricted Directory

Directory Traversal in the function httpverify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote code execution via a crafted HTTP request...