Description
浙江大华技术股份有限公司智能物联综合管理平台 /evo-apigw//evo-oauth/oauth/token 逻辑漏洞，攻击者可以登录后台
大华智能物联综合管理平台 /evo-apigw/evo-oauth/oauth/token 存在敏感信息泄露
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E5%A4%A7%E5%8D%8E/%E5%A4%A7%E5%8D%8EICC%E6%99%BA%E8%83%BD%E7%89%A9%E8%81%94%E7%BB%BC%E5%90%88%E7%AE%A1%E7%90%86%E5%B9%B3%E5%8F%B0heapdump%E6%95%8F%E6%84%9F%E4%BF%A1%E6%81%AF%E6%B3%84%E9%9C%B2.md
https://blog.csdn.net/gavinxiong/article/details/149119169
https://cn-sec.com/archives/2297280.html
https://www.cnblogs.com/priv/p/19296980
https://open-icc.dahuatech.com/iccdoc/enterprisebase/5.0.8/wiki/evo-oauth/userPass.html
https://mvip.tophant.com/detail/1892396426588196864
https://www.gm7.org/archives/38310