References https://github.com/ibaiw/2024Hvv/blob/main/%E7%94%A8%E5%8F%8B%20U8%20cloud%20MonitorServlet%20%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E6%BC%8F%E6%B4%9E.md https://stack.chaitin.com/tool/detail/1279 https://zone.ci/aliyun/ali_nonvd/252302.html https://zhzhdoai.github.io/2020/09/17/%E6%9F%90NC-%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E5%9B%9E%E6%98%BE%E6%9E%84%E9%80%A0/ https://cn-sec.com/archives/3004152.html https://github.com/qi4L/yongyouScan-go https://lfysec.top/2021/09/10/%E7%94%A8%E5%8F%8BNC%E6%8C%96%E6%8E%98%E7%AC%94%E8%AE%B0/
Related Vulnerabilities金蝶eascloud管理控制端任意文件上传关于U9 cloud存在接口XML注入漏洞的安全通告关于U9 cloud存在接口SQL注入漏洞的安全通告关于U9 cloud存在接口无授权访问漏洞的安全通告关于U8cloud所有版本CodeSyncServlet接口存在任意文件下载漏洞的安全通告关于NC Cloud及YonBIP高级版系统的公共入口接口漏洞安全通告关于用友GRP-U8Cloud产品getUsersList及getNoteCode存在信息泄露漏洞的安全通告思考軟體科技|EFence - 存在3個漏洞PoCCVE-2024-1708: ConnectWise ScreenConnect <= 23.9.7 - Path TraversalPoCCVE-2026-8236: Concrete CMS <9.5.1 - Unauthenticated File-Usage Internal Metadata DisclosurePoCCVE-2026-8237: Concrete CMS <= 9.5.0 - Unauthenticated Conversation Message Disclosure (IDOR)PoCibm-websphere-ssrf: IBM WebSphere HCL Digital Experience - Server-Side Request Forgery