EasyCVR /taillog/oxsecl/ 文件读取漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/EasyCVR/EasyCVR%E8%A7%86%E9%A2%91%E7%AE%A1%E7%90%86%E5%B9%B3%E5%8F%B0taillog%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E.md
• https://cn-sec.com/archives/3561950.html
• https://blog.csdn.net/m0_63512120/article/details/144589838
• https://blog.csdn.net/alpha/article/details/154057890
• https://cn-sec.com/archives/tag/easycvr
• https://blog.csdn.net/weixin_42570296/article/details/160078526
• https://github.com/adysec/POC/blob/main/wpoc/EasyCVR/EasyCVR%E8%A7%86%E9%A2%91%E7%AE%A1%E7%90%86%E5%B9%B3%E5%8F%B0taillog%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E.md
• https://pentest-tools.com/vulnerabilities-exploits/easycvr-video-management-arbitrary-file-read_26007

Related Vulnerabilities

• EasyCVR /api/v1/getbaseconfig 信息泄露漏洞（CVE-2025-1595）
• EasyCVR视频管理平台 downloadxlsx SQL注入漏洞
• 安徽旭帆信息科技有限公司EasyCVR存在账号密码泄露
• PoCCVE-2025-1595: EasyCVR <=2.1.2 - Information Disclosure
• PoCxunfan-easycvr-taillog-mediaserverlogs-fileread: 旭帆EasyCVR软件-taillog-mediaserverlogs任意文件读取
• PoCeasycvr-arbitrary-file-read: EasyCVR Video Management - Arbitrary File Read
• PoCeasycvr-userlist-info-disclosure: 视频监控汇聚平台 EasyCVR 用户信息泄漏
• EasyCVR 视频管理平台deleteuser存在任意用户删除漏洞
• EasyCVR 视频管理平台adduser存在任意用户添加漏洞
• EasyCVR视频管理平台 taillog 任意文件读取漏洞
• PoCEasyCVR-视频管理平台 mediaserverlogs 任意文件读取漏洞
• EasyCVR视频管理平台任意用户添加漏洞
• EasyCVR敏感信息泄露