cve-2025-1974

Created2025-03-27|Updated2025-03-28|漏洞追踪

|Post Views:

poc&exp

Author: lan1oc

Link: https://lan1oc.co/2025/03/27/cve-2025-1974/

Copyright Notice: All articles on this blog are licensed under CC BY-NC-SA 4.0 unless otherwise stated.

Related Articles

CVE-2025-30208复现

复现测绘hunter 1web.body="/@vite/client" poc1url/etc/passwd?raw 深度利用可以看这

通达oa漏洞复现

看版本：/inc/expired.php基本就是先用liqun工具箱吧，有的洞版本太老了就不管了适用于_通达_11.X全版本yii 前台反序列化（测试于11.7，小于12.3）有点难利用，过滤的函数挺多的：exec,shell_exec,system,passthru,proc_open,show_source,phpinfo,popen,dl,eval,proc_terminate,touch,escapeshellcmd,escapeshellarg不会绕过写shell，放弃了poc： 12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485<?php namespace yii\rest{ class CreateAction{ ...