References https://nvd.nist.gov/vuln/detail/CVE-2025-41393 https://jp.ricoh.com/security/products/vulnerabilities/vul?id=ricoh-2025-000001 https://jvn.jp/en/jp/JVN20474768/ https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000001 https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-41393.yaml https://pentest-tools.com/vulnerabilities-exploits/ricoh-web-image-monitor-reflected-xss_27118 https://jvn.jp/jp/JVN20474768/index.html https://avd.aliyun.com/detail?id=AVD-2025-41393 https://cve.imfht.com/detail/CVE-2025-41393 https://cert.kenet.or.ke/cve-2025-41393-ricoh-web-image-monitor-reflected-cross-site-scripting-vulnerability
Related VulnerabilitiesPoCCVE-2026-20896: Gitea Docker Image <= 1.26.2 - Reverse Proxy Header Authentication BypassPoCmonitorr-file-upload: Monitorr Services Configuration - Arbitrary File UploadPoCnet-vision-default-login: Net Vision UPS Monitor - Default LoginPoC用友A++ /ma/emp/maEmp/showImage 文件读取漏洞Progress WhatsUp Gold /NmConsole/Platform/PerformanceMonitorErrors/HasErrors SQL 注入漏洞(CVE-2024-6670)天地伟业 Easy7 /Easy7/rest/downLoad/downLoadImage 文件读取漏洞PoCCVE-2024-6569: Campaign Monitor for WordPress - Information DisclosurePoCCVE-2026-27771: Gitea Container Registry - Unauthorized Private Image Access鼎游票务系统 /system/ImageViewServlet 文件读取漏洞WordPress WP Responsive Images /wp-responsive-images/image_handler.php 文件读取漏洞(CVE-2026-1557)PoCdownload-monitor-unauth-log-export: Download Monitor < 1.9.7 - Unauthenticated Download Log ExportPoCSmanga动漫管理平台 /php/get-image-list.php 命令执行漏洞Artica Proxy /images.listener.php 文件读取漏洞(CVE-2024-2053)