CVE-2025-13315 PoC — Lynx Twonky Server 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-13315.yaml

Associated Vulnerability

Title:Lynx Twonky Server 安全漏洞 (CVE-2025-13315)
Description:Lynx Twonky Server是美国Lynx公司的一个DLNA/UPnP媒体服务器。 Lynx Twonky Server 8.5.2版本存在安全漏洞，该漏洞源于访问控制缺陷，可能导致日志文件泄露和管理员凭据泄露。

Description

Twonky Server 8.5.2 contains a broken access control vulnerability caused by bypassing web service API authentication, letting unauthenticated attackers read log files with administrator credentials, exploit requires no authentication

File Snapshot


 id: CVE-2025-13315

info:
  name: Twonky Server 8.5.2 on Linux and Windows - Log File Exposure
  aut

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!