## https://sploitus.com/exploit?id=9C9E2323-6339-5164-BDBE-15C81E339DE8
# CVE-2024-23346
This PoC is based on the report/findings of William Khem-Marquez and Matthew Horton:
(https://github.com/materialsproject/pymatgen/security/advisories/GHSA-vgv8-5cpj-qj2f)
### Usage:
python3 CVE-2024-23346.py -t target_URL -u username -p password -l local_host (-P local_port -X)<br/>
-P and -X are not required, but can be specified. -X is used to store the malicious CIF on your machine, to be able to execute the exploit manually.
### Disclaimer
This Proof of Concept (PoC) is provided for educational and research purposes only. The author takes no responsibility for any misuse or damage caused by this code. It is intended to demonstrate a concept and should not be used in environments where unauthorized access or malicious activity is prohibited. Use at your own risk and ensure compliance with all applicable laws and regulations.