CVE-2025-1337 PoC — Eastnets PaymentSafe BIC Search cross site scripting

Source

https://github.com/ada-z3r0/CVE-2025-1337-PoC

Associated Vulnerability

Title:Eastnets PaymentSafe BIC Search cross site scripting (CVE-2025-1337)
Description:A vulnerability was found in Eastnets PaymentSafe 2.5.26.0. It has been classified as problematic. This affects an unknown part of the component BIC Search. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 2.5.27.0 is able to address this issue.

Readme

# PoC para CVE-2025-1337

Prueba de concepto para la vulnerabilidad de Ejecución Remota de Código (RCE) en el servicio **LogServ v1.2**.

## Detalles de la Vulnerabilidad

- **CVE:** CVE-2025-1337
- **Software:** LogServ v1.2
- **Tipo:** Deserialización insegura de un objeto de sesión en la cookie `session_data`.
- **Impacto:** Un atacante no autenticado puede enviar una cookie maliciosa para ejecutar código arbitrario en el servidor.

## Estado
El script es funcional pero inestable. **NO USAR EN ENTORNOS REALES.**

File Snapshot


 [4.0K]  /data/pocs/b8aaace0db116aaf5a9b19b11f10e27cb4e073f6
├── [1.6K]  exploit.py
└── [ 526]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!