CVE-2025-27581 PoC — NIH BRICS 安全漏洞

Source

https://github.com/Henryisnotavailable/CVE-2025-27581

Associated Vulnerability

Title:NIH BRICS 安全漏洞 (CVE-2025-27581)
Description:NIH BRICS是美国NIH中心的一个生物医学研究信息学计算系统。 NIH BRICS 14.0.0-67及之前版本存在安全漏洞，该漏洞源于直接访问已知端点，可能导致未经授权的模块访问。

Description

Exploit scripts for CVE-2025-27581

Readme

# CVE-2025-27581
Exploit scripts for CVE-2025-27581

`BasicExploit.sh`
This just points the exploit to a file of your choice, it **should** set your target file to 0666 permissions but it can fail on certain files (depending on applocker policies or selinux).


`CreateFakeRoot.sh`
This points the exploit to `/etc/passwd`. It will set `/etc/passwd` as 0666 and then create a new passwd entry based on your given args.

File Snapshot


 [4.0K]  /data/pocs/e056567cace618eef7b7f5d111e443b612ae5b71
├── [ 515]  BasicExploit.sh
├── [1.3K]  CreateFakeRoot.sh
└── [ 419]  README.md

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!