CVE-2025-14198

MediumCVSS 5.3/10Last modified Oct 14, 2026

Description

A vulnerability was detected in Verysync 微力同步 2.21.3. This affects an unknown function of the file /safebrowsing/clientreport/download?key=dummytoken of the component Web Administration Module. Performing manipulation results in information disclosure. The attack is possible to be carried out remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-200 CWE-284

Affected software

Vendor	Product	Versions
Verysync	微力同步	2.21.3

References

https://github.com/jjjjj-zr/jjjjjzr/issues/7Exploit, Issue Tracking, Third Party Advisory
https://vuldb.com/?ctiid.334618Permissions Required, VDB Entry
https://vuldb.com/?id.334618Third Party Advisory, VDB Entry
https://vuldb.com/?submit.699533Third Party Advisory, VDB Entry
https://github.com/jjjjj-zr/jjjjjzr/issues/7Exploit, Issue Tracking, Third Party Advisory

Timeline

Published: Dec 7, 2025
Last modified: Oct 14, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-141999.8A flaw has been found in Verysync 微力同步 up to 2.21.3. This impacts an unknown function of the file /rest/f/api/resources/f96956469e7be39d/tmp CVE-2025-14202.4Input provided in a field containing "activationMessage" in Konsola Proget is not sanitized correctly, allowing a high-privileged user to pe CVE-2025-142006.1A vulnerability has been found in alokjaiswal Hotel-Management-services-using-MYSQL-and-php up to 5f8b60a7aa6c06a5632de569d4e3f6a8cd82f76f. CVE-2025-142014.8A vulnerability was found in alokjaiswal Hotel-Management-services-using-MYSQL-and-php up to 5f8b60a7aa6c06a5632de569d4e3f6a8cd82f76f. Affec CVE-2025-142028.2A vulnerability in the file upload at bookmark + asset rendering pipeline allows an attacker to upload a malicious SVG file with JavaScript CVE-2025-142038.8A flaw has been found in code-projects Question Paper Generator up to 1.0. This vulnerability affects unknown code of the file /selectquesti CVE-2025-142046.3A vulnerability has been found in TykoDev cherry-studio-TykoFork 0.1. This issue affects the function redirectToAuthorization of the file /.CVE-2025-142055.4A vulnerability was found in code-projects Chamber of Commerce Membership Management System 1.0. Impacted is an unknown function of the file CVE-2025-142067.5A vulnerability was determined in SourceCodester Online Student Clearance System 1.0. The affected element is an unknown function of the fil CVE-2025-142077.3A vulnerability was identified in tushar-2223 Hotel-Management-System up to bb1f3b3666124b888f1e4bcf51b6fba9fbb01d15. The impacted element i CVE-2025-142086.3A security flaw has been discovered in D-Link DIR-823X up to 20250416. This affects the function sub_415028 of the file /goform/set_wan_sett CVE-2025-142099.8A weakness has been identified in Campcodes School File Management System 1.0. This impacts an unknown function of the file /update_query.ph