Exploit for OS Command Injection in Hoverfly CVE-2025-54123

Name: Exploit for OS Command Injection in Hoverfly CVE-2025-54123
Rating: 5 (380 reviews)

2026-03-28 | CVSS 9.8

## https://sploitus.com/exploit?id=CD5D96A3-53E4-566D-AE41-C95425986AE4
# CVE-2025-54123

A PoC demonstrating a RCE in Hoverfly (versions ≤ 1.11.3) by abusing the /api/v2/hoverfly/middleware endpoint and injecting a malicious middleware script

# Usage 
```bash
git clone https://github.com/0xzap/CVE-2025-54123.git
python3 cve-2025-54123     
```
# References 
- https://nvd.nist.gov/vuln/detail/CVE-2025-54123