CVE-2025-27581 PoC — NIH BRICS 安全漏洞

Source

https://github.com/Henryisnotavailable/CVE-2025-27581

Associated Vulnerability

Title: NIH BRICS 安全漏洞 (CVE-2025-27581)
Description:NIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67 allows users who lack the InET role to access the InET module via direct requests to known endpoints.

Description

Exploit scripts for CVE-2025-27581

Readme

# CVE-2025-27581
Exploit scripts for CVE-2025-27581

`BasicExploit.sh`
This just points the exploit to a file of your choice, it **should** set your target file to 0666 permissions but it can fail on certain files (depending on applocker policies or selinux).


`CreateFakeRoot.sh`
This points the exploit to `/etc/passwd`. It will set `/etc/passwd` as 0666 and then create a new passwd entry based on your given args.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →