Lucene search
K

38 matches found

GithubExploit
GithubExploit
added 2019/10/23 10:24 p.m.40 views

Exploit for Path Traversal in Nazgul Nostromo_Nhttpd

Nostrom RCE Python3...

9.8CVSS9.4AI score0.94393EPSS
Exploits24
CNVD
CNVD
added 2019/10/16 12:0 a.m.2 views

nostromo nhttpd memory error vulnerability

nostromo nhttpd is an open source web server . A memory error vulnerability exists in the 'SSLaccept' function in nostromo nhttpd 1.9.6 and earlier versions. An attacker is able to trigger a denial of service via a crafted http request...

7.5CVSS6.7AI score0.90223EPSS
Exploits4References1
GithubExploit
GithubExploit
added 2019/10/15 9:22 a.m.154 views

Exploit for Path Traversal in Nazgul Nostromo_Nhttpd

CVE-2019-16728-PoC CVE-201...

9.8CVSS7.9AI score0.94393EPSS
Exploits25
GithubExploit
GithubExploit
added 2019/10/15 3:40 a.m.131 views

Exploit for Path Traversal in Nazgul Nostromo_Nhttpd

Exploits for CVE-2019-16278 and CVE-2019-16279 Nostromo httpd...

9.8CVSS9.1AI score0.94393EPSS
Exploits27
NVD
NVD
added 2019/10/14 5:15 p.m.12 views

CVE-2019-16279

A memory error in the function SSLaccept in nostromo nhttpd through 1.9.6 allows an attacker to trigger a denial of service via a crafted HTTP request...

7.5CVSS7.3AI score0.90223EPSS
Exploits4References3
OSV
OSV
added 2019/10/14 5:15 p.m.1 views

CVE-2019-16278

Directory Traversal in the function httpverify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote code execution via a crafted HTTP request...

9.8CVSS6.3AI score0.94393EPSS
Exploits24References6
OSV
OSV
added 2019/10/14 5:15 p.m.1 views

CVE-2019-16279

A memory error in the function SSLaccept in nostromo nhttpd through 1.9.6 allows an attacker to trigger a denial of service via a crafted HTTP request...

7.5CVSS7.2AI score
Exploits0References3
Prion
Prion
added 2019/10/14 5:15 p.m.16 views

Cross site request forgery (csrf)

A memory error in the function SSLaccept in nostromo nhttpd through 1.9.6 allows an attacker to trigger a denial of service via a crafted HTTP request...

5CVSS7.3AI score0.90223EPSS
Exploits4References3Affected Software1
Prion
Prion
added 2019/10/14 5:15 p.m.16 views

Directory traversal

Directory Traversal in the function httpverify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote code execution via a crafted HTTP request...

7.5CVSS9.4AI score0.94393EPSS
Exploits24References5Affected Software1
CVE
CVE
added 2019/10/14 4:6 p.m.335 views

CVE-2019-16278

CVE-2019-16278 affects Nostromo nhttpd up to version 1.9.6. A directory traversal flaw in http_verify enables remote code execution via a crafted HTTP request. Exploitation has public examples (Exploit-DB/Metasploit) and active references exist in security feeds; no remediation details are provid...

9.8CVSS9.3AI score0.94393EPSS
In wildExploits24References6Affected Software1
CVE
CVE
added 2019/10/14 4:1 p.m.96 views

CVE-2019-16279

CVE-2019-16279 affects Nostromo nhttpd up to version 1.9.6. A memory error in SSL_accept can be triggered by a crafted HTTP request to cause a denial of service. OpenVAS references Nostromo nhttpd

7.5CVSS7.3AI score0.90223EPSS
Exploits4References3Affected Software1
Cvelist
Cvelist
added 2019/10/14 4:1 p.m.14 views

CVE-2019-16279

A memory error in the function SSLaccept in nostromo nhttpd through 1.9.6 allows an attacker to trigger a denial of service via a crafted HTTP request...

7.3AI score0.90223EPSS
Exploits4References3
Positive Technologies
Positive Technologies
added 2019/10/14 12:0 a.m.2 views

PT-2019-14609 · Nostromo · Nostromo Nhttpd

Name of the Vulnerable Software and Affected Versions: Nostromo nhttpd versions 1.9.6 and earlier Description: The issue allows an attacker to achieve remote code execution via a crafted HTTP request due to a directory traversal vulnerability in the http verify function. This vulnerability is bei...

9.8CVSS10AI score0.94393EPSS
Exploits24References34
OpenVAS
OpenVAS
added 2011/03/22 12:0 a.m.11 views

Nazgul Nostromo nhttpd < 1.9.4 Directory Traversal Vulnerability - Active Check

Nazgul Nostromo nhttpd is prone to a directory traversal vulnerability. This VT has been deprecated as a duplicate of the VT SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

7.5CVSS6.5AI score0.06922EPSS
Exploits4References3
OpenVAS
OpenVAS
added 2011/03/21 12:0 a.m.24 views

nostromo nhttpd Directory Traversal Remote Command Execution Vulnerability

nostromo nhttpd is prone to a remote command-execution vulnerability because it fails to properly validate user-supplied data. An attacker can exploit this issue to access arbitrary files and execute arbitrary commands with application-level privileges. nostromo versions prior to 1.9.4 are...

7.5CVSS0.9AI score0.06922EPSS
Exploits4References3
securityvulns
securityvulns
added 2011/03/16 12:0 a.m.186 views

[RT-SA-2011-001] nostromo nhttpd directory traversal leading to arbitrary command execution

Advisory: nostromo nhttpd directory traversal leading to arbitrary command execution During a penetration test, RedTeam Pentesting discovered a directory traversal vulnerability leading to arbitrary command execution in the nostromo HTTP server. Details ======= Product: nostromo nhttpd Affected...

7.5CVSS9.8AI score0.06922EPSS
Exploits4
Exploit DB
Exploit DB
added 2011/03/05 12:0 a.m.34 views

nostromo nhttpd 1.9.3 - Directory Traversal Remote Command Execution

source: https://www.securityfocus.com/bid/46880/info nostromo nhttpd is prone to a remote command-execution vulnerability because it fails to properly validate user-supplied data. An attacker can exploit this issue to access arbitrary files and execute arbitrary commands with application-level...

7.4AI score
Exploits0
exploitpack
exploitpack
added 2011/03/05 12:0 a.m.18 views

nostromo nhttpd 1.9.3 - Directory Traversal Remote Command Execution

nostromo nhttpd 1.9.3 - Directory Traversal Remote Command Execution source: https://www.securityfocus.com/bid/46880/info nostromo nhttpd is prone to a remote command-execution vulnerability because it fails to properly validate user-supplied data. An attacker can exploit this issue to access...

0.6AI score
Exploits0
Rows per page
Query Builder