GobyVuls/CVE-2019-16278.md

Nostromo nhttpd RCE (CVE-2019-16278)

Vulnerability	Nostromo nhttpd RCE (CVE-2019-16278)
Chinese name	Nostromo nhttpd远程代码执行漏洞（CVE-2019-16278）
CVSS core	9.8
FOFA Query (click to view the results directly)	(header="Server: nostromo" || banner="Server: nostromo ")
Number of assets affected	3737
Description	Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote code execution via a crafted HTTP request.
Impact	Nostromo nhttpd RCE (CVE-2019-16278)