CVE-2023-33831

This exploit targets an unauthenticated RCE vulnerability in FUXA V.1.1.13-1186 via the /api/runscript endpoint. It leverages Node.js's child_process.exec to spawn a reverse shell by injecting a malicious script into the 'code' parameter.

This exploit leverages CVE-2023-33831 to achieve remote code execution (RCE) by sending a crafted JSON payload to a vulnerable API endpoint, triggering a reverse shell via Node.js `child_process.exec`.