CVE-2025-10352-POC

CVE-2025-10352 POC - 创建管理员账户 🛠️ CVE-2025-10352 的 POC：Melis Platform（melis-core）中存在一个未认证端点，允许通过向特定管理端点发送精心构造的 HTTP 请求来创建管理员账户。 🔗 参考链接 📄 MITRE 上的 CVE-2025-10352 📄 INCIBE（西班牙国家网络安全研究所）关于 Melis Platform 的警告 📄 PoC：CVE-2025-10352-POC.txt（从 Burp 导出的原始 HTTP 请求） 🚀 描述 此 PoC 针对 melis-core 模块中的一个未认证管理端点 ：...

Unauthorized Account Creation

melis-core is vulnerable to Unauthorized Account Creation. The vulnerability is due to missing authentication on the /melis/MelisCore/ToolUser/addNewUser endpoint, where an unauthenticated attacker can directly invoke this function to create a new administrator account and gain full control of th...

GHSA-P3VC-G9F9-MGW4 Melis Platform CMS Unauthenticated Admin Account Creation

Vulnerability in the melis-core module of Melis Technology's Melis Platform, which, if exploited, allows an unauthenticated attacker to create an administrator account via a request to '/melis/MelisCore/ToolUser/addNewUser'...

Melis Platform CMS Unauthenticated Admin Account Creation

Vulnerability in the melis-core module of Melis Technology's Melis Platform, which, if exploited, allows an unauthenticated attacker to create an administrator account via a request to '/melis/MelisCore/ToolUser/addNewUser'...

Exploit for CVE-2025-10353

CVE-2025-10352 - Admin Account Creation PoC 🛠️ Exploit for C...

Missing Authorization

Overview melisplatform/melis-core is a Melis Platform Core module Affected versions of this package are vulnerable to Missing Authorization via the /melis/MelisCore/ToolUser/addNewUser endpoint. An attacker can gain unauthorized administrative access by sending a crafted request to this endpoint...

CVE-2025-10352

Vulnerability in the melis-core module of Melis Technology's Melis Platform, which, if exploited, allows an unauthenticated attacker to create an administrator account via a request to '/melis/MelisCore/ToolUser/addNewUser'...

PT-2025-41245

Name of the Vulnerable Software and Affected Versions Melis Platform affected versions not specified Description A flaw exists in the melis-core module that allows an unauthenticated attacker to create an administrator account. This is achieved by sending a request to the...

Melis Platform 安全漏洞

Melis Platform is an open source cross-framework digital platform from Melis Platform Open Source. A security vulnerability exists in Melis Platform, which originates in the melis-core module and allows an unauthenticated attacker to create an administrator account by requesting...