CVE-2023-4596

This exploit demonstrates an unauthenticated remote command execution vulnerability in WordPress Plugin Forminator 1.24.6 via file upload. The vulnerability allows an attacker to upload a malicious PHP file through the 'postdata-1-post-image' parameter, bypassing file extension checks.

This repository contains a functional Python exploit for CVE-2023-4596, an unauthenticated arbitrary file upload vulnerability in the WordPress Forminator plugin. The exploit automates the process of uploading a malicious PHP file to achieve remote code execution (RCE) on vulnerable installations.

This repository contains a bash script that scans for CVE-2024-6387 by checking OpenSSH versions on local and remote systems using nmap. It identifies vulnerable versions and excludes patched ones, providing a detailed report.

This repository contains a functional Python exploit for CVE-2023-4596, targeting unauthenticated remote command execution via arbitrary file uploads in the Forminator plugin for WordPress. The script includes both a vulnerability checker and an exploit module capable of achieving RCE.