CVE-2024-25832

This exploit chains two CVEs (CVE-2024-25830 and CVE-2024-25832) to achieve remote code execution on DataCube3 v1.0. It first leaks root credentials via an info disclosure vulnerability, then authenticates and uploads a PHP reverse shell via unrestricted file upload.

This PoC exploits CVE-2024-25830 (improper access control) to leak root credentials and CVE-2024-25832 (unrestricted file upload) to deploy a PHP reverse shell on DataCube3 devices. The script automates the exploit chain, including authentication bypass and payload execution.