Skip to content

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

Nostromo

Security incidents tagged Nostromo. Newest first.

0 Nostromo incidents in the last 12 months

Critical 4 · High 3 · Med 2 · Low 1 · Update ½LessMore
Incidents
1
Live
0
Patched
1
Days without an incident
714
Longest quiet run: 715 days (Nov 8–Oct 23)
Show 1 older incident

November 2024 1

  • PatchedNostromo nhttpd Directory Traversal

    Nostromo nhttpd

    Nostromo nhttpd contains a directory traversal vulnerability in the http_verify() function in a non-chrooted nhttpd server allowing for remote code execution. Added to the CISA KEV catalog on 2024-11-07. CVE-2019-16278 was assigned before 2024; the KEV listing came in 2024.

    Open incident →CVE-2019-16278