CVE-2025-13315 POC (Proof-of-Concept)

Twonky Server 8.5.2 on Linux and Windows is vulnerable to an access control flaw. An unauthenticated attacker can bypass web service API authentication controls to leak a log file and read the administrator's username and encrypted password.

Published: 2025-11-19

CVSS: 9.8

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Download CVE-2025-13315 POC (Proof-of-Concept) here:

Tip: Download official Tor Browser at https://www.torproject.org/download/ to access .onion links.

Check my portfolio here:

https://tlncglobal.com/poc-493-cve-2024-9487/

https://tlncglobal.com/poc-57-cve-2025-6800/

https://tlncglobal.com/poc-927-cve-2024-47374/

https://tlncglobal.com/poc-882-cve-2024-4936/