Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2023-25263 PoC — Stimulsoft 安全漏洞

Source
https://github.com/trustcves/CVE-2023-25263
Associated Vulnerability
Title:Stimulsoft 安全漏洞 (CVE-2023-25263)
Description:In Stimulsoft Designer (Desktop) 2023.1.5, and 2023.1.4, once an attacker decompiles the Stimulsoft.report.dll the attacker is able to decrypt any connectionstring stored in .mrt files since a static secret is used. The secret does not differ between the tested versions and different operating systems.
File Snapshot

 [4.0K]  /data/pocs/3b6a343dae0b8ad644afdf32e308dd95b90b2002
├── [4.0K]  images
│   ├── [ 27K]  connection_string.png
│   ├── [ 28K]  decryption.png
│   └── [ 49K]  demo_setup.png
└── [4.6K]  writeup.md

1 directory, 4 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →