Cyber security

CVE-2024-25153 : A Detailed Guide To Remote Code Execution In Fortra File Catalyst Workflow

This is a proof of concept for CVE-2024-25153, a Remote Code Execution vulnerability in Fortra FileCatalyst Workflow 5.x, before 5.1.6 Build 114.

Full technical details can be found.

Usage

Run the exploit using the following command:

CVE-2024-25153.py --host <hostname> --port <port> --url <url> --cmd <command>

Only the --host argument is required, and others are optional. Use the --help argument for full usage instructions.

Disclaimer

This proof-of-concept is for demonstration purposes and should not be used for illegal activities. LRQA Nettitude are not responsible for any damage caused by the use or misuse of this code.

Varshini

Varshini is a Cyber Security expert in Threat Analysis, Vulnerability Assessment, and Research. Passionate about staying ahead of emerging Threats and Technologies.

Recent Posts

OSINT Framework Official Website: Categories, Use Cases and Safer Alternatives

The OSINT Framework official website is one of the easiest places to start open-source intelligence…

1 hour ago

OSINT Framework Website Guide: How to Use OSINTFramework.com Without Getting Lost

The OSINT Framework website is one of the most popular starting points for open-source intelligence…

1 hour ago

Fail2ban Ubuntu Setup: Protect Your Server from Attacks

Internet-facing servers are constantly targeted by bots searching for weak passwords and vulnerable services. A…

1 hour ago

Add Remove Users Ubuntu: Complete User Management Guide

Managing user accounts is one of the most important administrative tasks on any Linux system.…

2 hours ago

Install Slack Ubuntu – Easy Setup Guide for Ubuntu 20.04

Install Slack Ubuntu systems quickly and start collaborating with your team from a powerful communication…

2 hours ago

Install Atom Ubuntu: Easy Setup Guide for Developers

If you're looking for a flexible and customizable code editor, Install Atom Ubuntu is a…

2 hours ago