CVE-2025-54123-Poc

CVE-2025-54123 漏洞利用 Hoverfly 认证中间件命令注入远程代码执行 | CVSS 9.8 严重 漏洞描述 Hoverfly -u -p -c --shell SHELL -t, --target - Hoverfly API 端点（必需） -u, --username - 管理员用户名（必需） -p, --password - 管理员密码（必需） -c, --command - 要执行的命令（必需） --shell - 使用的 Shell 二进制路径（默认：/bin/bash） 示例 基本命令执行 python3 exploit.py -t...

CVE-2025-54123

CVE-2025-54123 - Hoverfly コマンドインジェクション RCE PoC CVE-2025-54123 - Hoverfly におけるミドルウェアコマンドインジェクション 📌 CVE 詳細 ID : CVE-2025-54123 タイプ : コマンドインジェクション / リモートコード実行 RCE ベンダー : Hoverfly 影響 : 認証された攻撃者がミドルウェア API エンドポイントを介して任意のシステムコマンドを実行できるようにします。 影響を受けるバージョン : Hoverfly ≤ 1.11.3 詳細情報 : GHSA-r4h8-hfp2-ggmf...

Exploit for OS Command Injection in Hoverfly

CVE-2025-54123 A PoC demonstrating a RCE in Hoverfly version...

VulnCheck KEV: CVE-2025-54123

Hoverfly is an open source API simulation tool. In versions 1.11.3 and prior, the middleware functionality in Hoverfly is vulnerable to command injection vulnerability at /api/v2/hoverfly/middleware endpoint due to insufficient validation and sanitization in user input. The vulnerability exists i...

Command Injection

Hoverfly is vulnerable to Command Injection. The vulnerability is due to improper input validation in the middleware endpoint due to the binary and script parameters being passed directly into a system without sanitization. This allows an attacker to supply crafted values for those parameters to...

GHSA-R4H8-HFP2-GGMF Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation

Summary It has been discovered that the middleware functionality in Hoverfly is vulnerable to command injection through its /api/v2/hoverfly/middleware endpoint due to insufficient validation and sanitization in user input. Details The vulnerability exists in the middleware management API endpoin...

CVE-2025-54123 Hoverfly vulnerable to remote code execution at `/api/v2/hoverfly/middleware` endpoint due to insecure middleware implementation

Hoverfly is an open source API simulation tool. In versions 1.11.3 and prior, the middleware functionality in Hoverfly is vulnerable to command injection vulnerability at /api/v2/hoverfly/middleware endpoint due to insufficient validation and sanitization in user input. The vulnerability exists i...

CVE-2025-54123 Hoverfly vulnerable to remote code execution at `/api/v2/hoverfly/middleware` endpoint due to insecure middleware implementation

Hoverfly is an open source API simulation tool. In versions 1.11.3 and prior, the middleware functionality in Hoverfly is vulnerable to command injection vulnerability at /api/v2/hoverfly/middleware endpoint due to insufficient validation and sanitization in user input. The vulnerability exists i...

CVE-2025-54123 Hoverfly vulnerable to remote code execution at `/api/v2/hoverfly/middleware` endpoint due to insecure middleware implementation

Hoverfly is an open source API simulation tool. In versions 1.11.3 and prior, the middleware functionality in Hoverfly is vulnerable to command injection vulnerability at /api/v2/hoverfly/middleware endpoint due to insufficient validation and sanitization in user input. The vulnerability exists i...