This is a proof of concept for CVE-2024-25153, a Remote Code Execution vulnerability in Fortra FileCatalyst Workflow 5.x, before 5.1.6 Build 114.
Full technical details can be found.
Run the exploit using the following command:
CVE-2024-25153.py --host <hostname> --port <port> --url <url> --cmd <command>Only the --host argument is required, and others are optional. Use the --help argument for full usage instructions.
This proof-of-concept is for demonstration purposes and should not be used for illegal activities. LRQA Nettitude are not responsible for any damage caused by the use or misuse of this code.
Nextcloud is a free, open-source, self-hosted file sharing and collaboration platform. It gives you a private…
Plex is a self-hosted streaming media server that organizes your video, music, and photo collections into…
Visual Studio Code is a free, open-source, cross-platform code editor from Microsoft. It ships with built-in…
Odoo is one of the most widely used open-source ERP platforms in the world. It handles…
Let's Encrypt is a free, automated, and open certificate authority run by the Internet Security Research…
Nginx (pronounced "engine x") is a free, open-source, high-performance HTTP server and reverse proxy. It handles…