CVE-2023-24709

This script exploits a Denial of Service (DoS) vulnerability in Paradox Security Systems IPR512 by sending a malformed HTTP GET request to the login.cgi endpoint. The exploit uses a crafted payload in the log_user parameter to trigger the vulnerability.

This repository contains a functional PoC for CVE-2023-24709, an unauthenticated JavaScript injection vulnerability in Paradox Security Systems IPR512. The exploit overwrites the 'login.xml' file, causing the login form to crash and become unavailable.