Skip to content
KitploitKITPLOIT
ToolsBlog
Log in
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2024-22198_Checker — Identify Nginx-ui version and check if it's vulnerable to CVE-2024-22198 | Kitploit
Tools/GitHubGitHub/xiw1ll/cve-2024-22198_checker
ReconnaissanceVulnerability ScannersExploitationWeb Application ExploitationInformation GatheringPenetration Testing
GitHubxiw1ll/cve-2024-22198_checker

CVE-2024-22198_Checker

Identify Nginx-ui version and check if it's vulnerable to CVE-2024-22198

View Repository
182 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2024-22198 - authenticated remote code execution in Nginx-ui

Description

This tool made for remote checking your Nginx-ui version and notify if it's vulnerable to CVE-2024-22198.

Nginx-UI is a web interface to manage Nginx configurations. It is vulnerable to arbitrary command execution by abusing the configuration settings. The Home > Preference page exposes a list of system settings such as Run Mode, Jwt Secret, Node Secret and Terminal Start Command. While the UI doesn't allow users to modify the Terminal Start Command setting, it is possible to do so by sending a request to the API. This issue may lead to authenticated remote code execution, privilege escalation, and information disclosure. This vulnerability has been patched in version 2.0.0.beta.9.

Example

➜  python3 nginxui_checker.py http://172.17.0.4
[!] Nginx-ui version: 2.0.0-beta.8 Vulnerable: True

Exploit

N/A

References

  • https://nvd.nist.gov/vuln/detail/CVE-2024-22198
Download Tool