CVE-2025-54769

This exploit targets CVE-2025-54769 in LPAR2RRD 8.04, leveraging a directory traversal vulnerability to upload a malicious Perl script via the upgrade endpoint, then executing it to achieve remote code execution (RCE). The PoC includes a Perl payload that runs the 'whoami' command and uses cURL for HTTP requests.

The repository contains a functional exploit for CVE-2025-54769, targeting LPAR2RRD via a directory traversal and RCE vulnerability in the /lpar2rrd-cgi/upgrade.sh endpoint. The exploit uploads a malicious Perl CGI script, leverages path traversal to place it in an executable directory, and triggers remote command execution.