References https://www.cnblogs.com/heartbreaksilence/articles/17969355 https://github.com/zan8in/wy876-POC/blob/main/EasyCVR%E8%A7%86%E9%A2%91%E7%AE%A1%E7%90%86%E5%B9%B3%E5%8F%B0/EasyCVR%20%E8%A7%86%E9%A2%91%E7%AE%A1%E7%90%86%E5%B9%B3%E5%8F%B0%E5%AD%98%E5%9C%A8%E7%94%A8%E6%88%B7%E4%BF%A1%E6%81%AF%E6%B3%84%E9%9C%B2.md https://cn-sec.com/archives/2881383.html https://blog.51cto.com/u_16230815/10150341 https://cn-sec.com/archives/2098844.html https://github.com/runZeroInc/nuclei-templates/blob/main/http/vulnerabilities/other/easycvr-info-leak.yaml https://cn-sec.com/archives/2097115.html https://it.shanghaitech.edu.cn/2024/0124/c8406a1087958/page.htm
Related VulnerabilitiesEasyCVR /api/v1/getbaseconfig 信息泄露漏洞(CVE-2025-1595)EasyCVR视频管理平台 downloadxlsx SQL注入漏洞安徽旭帆信息科技有限公司EasyCVR存在账号密码泄露PoCCVE-2025-1595: EasyCVR <=2.1.2 - Information DisclosurePoCxunfan-easycvr-taillog-mediaserverlogs-fileread: 旭帆EasyCVR软件-taillog-mediaserverlogs任意文件读取PoCeasycvr-arbitrary-file-read: EasyCVR Video Management - Arbitrary File ReadPoCeasycvr-userlist-info-disclosure: 视频监控汇聚平台 EasyCVR 用户信息泄漏EasyCVR 视频管理平台deleteuser存在任意用户删除漏洞EasyCVR 视频管理平台adduser存在任意用户添加漏洞EasyCVR视频管理平台 taillog 任意文件读取漏洞EasyCVR /taillog/oxsecl/ 文件读取漏洞PoCEasyCVR-视频管理平台 mediaserverlogs 任意文件读取漏洞