CVE-2019-16278

Related Files

nostromo 1.9.6 Remote Code Execution

Posted Dec 31, 2019

Authored by Kr0ff

nostromo version 1.9.6 suffers from a remote code execution vulnerability.

tags | exploit, remote, code execution

advisories | CVE-2019-16278

SHA-256 | 71091ee1ce8b929485719940130d68fc23025355ec1a5988d19c8221e0aa77f8

Download | Favorite | View

Nostromo 1.9.6 Directory Traversal / Remote Command Execution

Posted Oct 31, 2019

Authored by Quentin Kaiser, sp0re | Site metasploit.com

This Metasploit module exploits a remote command execution vulnerability in Nostromo versions 1.9.6 and below. This issue is caused by a directory traversal in the function http_verify in nostromo nhttpd allowing an attacker to achieve remote code execution via a crafted HTTP request.

tags | exploit, remote, web, code execution

advisories | CVE-2019-16278

SHA-256 | 1baffab9687f81feac9fe65275eba574314a19a248d0ee583a4ac8f7f390b032

Download | Favorite | View