CVE-2019-16278

CVE-2019-16278 - Nostromo nhttpd 远程代码执行 漏洞描述 在 Nostromo nhttpd 版本 2&1 使用方法 python3 cve-2019-16278.py 示例： python3 cve-2019-16278.py 192.168.1.100 80 "id" python3 cve-2019-16278.py 10.10.10.10 8080 "cat /etc/passwd" python3 cve-2019-16278.py target.com 80 "whoami" python3 cve-2019-16278.py...

CVE-2019-16278-Nostromo_1.9.6-RCE

CVE-2019-16278 - Nostromo 1.9.6 远程代码执行 Python脚本，用于在Nostromo nhttpd = 1.9.6中利用RCE漏洞。 帮助 usage: CVE-2019-16278.py -h -t TARGET -p PORT -c COMMAND -b BYTES CVE-2019-16278漏洞利用工具 - Nostromo 1.9.6 远程代码执行 可选参数： -h, --help 显示此帮助信息并退出 -t TARGET, --target TARGET 远程目标主机 -p PORT, --port PORT 远程目标端口 -c COMMAN...

CVE-2019-16278-PoC

CVE-2019-16728-PoC CVE-2019-16728 参考 https://git.sp0re.sh/sp0re/Nhttpd-exploits/src/branch/master/CVE-2019-16278.sh...

CVE-2019-16278

CVE-2019-16278 一个简单快速的 Python 脚本，用于利用 CVE-2019-16278（Nostromo 1.9.6）中 httpverify 函数的目录遍历漏洞，通过精心构造的 HTTP 请求实现未授权的远程代码执行（RCE）。必需参数仅为主机和 Web 服务器端口，可选参数为要执行的命令（默认命令为 id）。 用法：nostroxploit.py host port command...

CVE-2019-16278

CVE-2019-16278 简单的 Python 脚本，用于利用 CVE-2019-16278 路径遍历漏洞，实现未授权的远程代码执行。 用法：python3 nostroSploit.py targetIP targetPort optional command to run 参考来源：https://git.sp0re.sh/sp0re/Nhttpd-exploits/src/branch/master/CVE-2019-16278.sh...

cve-2019-16278

CVE-2019-16278 This is an exploit for the CVE-2019-16278 vulnerability. It allows remote code execution on an nhttpd server v1.9.6. Building from Source This tool is written in Rust and you need to install the Rust compiler which is super easy if you follow the instructions in their page Compilin...

cve-2019-16278

cve-2019-16278 Nhttpd Nostromo 1.9.6 由于目录遍历导致的远程代码执行 git clone https://github.com/Kr0ff/cve-2019-16278...

CVE-2019-16279

A memory error in the function SSLaccept in nostromo nhttpd through 1.9.6 allows an attacker to trigger a denial of service via a crafted HTTP request...

CVE-2019-16278

Directory Traversal in the function httpverify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote code execution via a crafted HTTP request...

Exploit for Path Traversal in Nazgul Nostromo_Nhttpd

CVE-2019-16278 - Nostromo nhttpd RCE Vulnerability Descrip...

Nazgul Nostromo nhttpd < 2.1 Path Traversal Vulnerability

Nazgul Nostromo nhttpd is prone to a path traversal vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2022-48253

nhttpd in Nostromo before 2.1 is vulnerable to a path traversal that may allow an attacker to execute arbitrary commands on the remote server. The vulnerability occurs when the homedirs option is used...

Nazgul Nostromo nhttpd < 1.9.7 Multiple Directory Traversal Vulnerabilities

Nazgul Nostromo nhttpd is prone to multiple directory traversal vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Nostromo nhttpd Directory Traversal Vulnerability

Nostromo nhttpd contains a directory traversal vulnerability in the httpverify function in a non-chrooted nhttpd server allowing for remote code execution...

CVE-2022-48253

nhttpd in Nostromo before 2.1 is vulnerable to a path traversal that may allow an attacker to execute arbitrary commands on the remote server. The vulnerability occurs when the homedirs option is used...

CVE-2022-48253

nhttpd in Nostromo before 2.1 is vulnerable to a path traversal that may allow an attacker to execute arbitrary commands on the remote server. The vulnerability occurs when the homedirs option is used...

Path traversal

nhttpd in Nostromo before 2.1 is vulnerable to a path traversal that may allow an attacker to execute arbitrary commands on the remote server. The vulnerability occurs when the homedirs option is used...

nostromo 路径遍历漏洞

nostromo nhttpd is an open source web server. A security vulnerability exists in versions prior to Nostromo 2.1 that stems from a path traversal vulnerability in nhttpd that could allow an attacker to execute arbitrary commands on a remote server...

CVE-2022-48253

nhttpd in Nostromo before 2.1 is vulnerable to a path traversal that may allow an attacker to execute arbitrary commands on the remote server. The vulnerability occurs when the homedirs option is used...

CVE-2022-48253

CVE-2022-48253 describes a path traversal vulnerability in Nostromo’s web server component, nhttpd , for versions prior to 2.1. The root cause is a path traversal flaw triggered when the homedirs option is used, potentially enabling an attacker to execute arbitrary commands on a remote server. Pu...