A vulnerability was detected in Verysync 微力同步 2.21.3.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Dec 7, 2025 · NIST NVD

   Detected

   A vulnerability was detected in Verysync 微力同步 2.21.3. This affects an unknown function of the file /safebrowsing/clientreport/download?key=dummytoken of the component Web Administration Module. Performing manipulation results in information disclosure. The attack is possible to be carried out remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure

2. Oct 14, 2026 · NIST NVD

   Updated

   A vulnerability was detected in Verysync 微力同步 2.21.3. This affects an unknown function of the file /safebrowsing/clientreport/download?key=dummytoken of the component Web Administration Module. Performing manipulation results in information disclosure. The attack is possible to be carried out remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure

Affected

• cpe verysync/verysyncversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2025-14198

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2025-14198

  30-day exploitation probability 0.5%

  first.org
• NIST NVDVulnerability recordCVE-2025-14198

  A vulnerability was detected in Verysync 微力同步 2.21.3. This affects an unknown function of the file /safebrowsing/clientreport/download?key=dummytoken of the component Web Administration Module. Performing manipulation results in information disclosure. The attack is possible to b

  nvd.nist.gov

References

• Exploit · github.com
• Permissions Required · vuldb.com
• Third Party Advisory · vuldb.com
• Third Party Advisory · vuldb.com