CybermonkX

2 exploits Active since Dec 2017

CVE-2019-16278 NOMISEC CRITICAL WORKING POC

nostromo_nhttpd <= 1.9.6 - Remote Code Execution via Directory Traversal in http_verify

Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote code execution via a crafted HTTP request.

CVSS 9.8

View Code

CVE-2016-6914 NOMISEC HIGH WORKING POC

UniFi Video < 3.8.0 - Local Privilege Escalation via Weak Installation Directory Permissions

Ubiquiti UniFi Video before 3.8.0 for Windows uses weak permissions for the installation directory, which allows local users to gain SYSTEM privileges via a Trojan horse taskkill.exe file.

CVSS 7.8

View Code