CVE-2024-2389

The repository contains a functional Python exploit for CVE-2024-2389, targeting Progress Kemp Flowmon via command injection in the `service.pdfs/confluence` endpoint to achieve a reverse shell. The exploit uses a crafted URL with a netcat payload to execute arbitrary commands on the target system.

This Metasploit module exploits an unauthenticated command injection vulnerability in Progress Flowmon versions before 12.03.02 via the 'pluginPath' parameter in a GET request to 'service.pdfs'.

This Metasploit module exploits a sudo privilege escalation vulnerability in Progress Flowmon by overwriting a PHP file to add a sudoers entry, allowing execution of arbitrary commands as root.