大华智能物联网综合管理平台receive 存在命令执行漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.ddpoc.com/DVB-2025-9622.html
• https://cn-sec.com/archives/4692009.html
• https://cn-sec.com/archives/4357593.html
• https://cn-sec.com/archives/4290680.html
• https://cn-sec.com/archives/4286194.html
• https://www.cnvd.org.cn/flaw/show/CNVD-2025-00420
• https://cn-sec.com/archives/tag/%E6%99%BA%E8%83%BD%E7%89%A9%E8%81%94%E7%BB%BC%E5%90%88%E7%AE%A1%E7%90%86%E5%B9%B3%E5%8F%B0
• https://www.cnblogs.com/Domren/articles/19010351
• https://laolisafe.com/4782.html
• https://github.com/kk12-30/2025hvv

Related Vulnerabilities

• 大华ICC智能物联网管理平台 /evo-runs/v1.0/receive/response/file 文件读取漏洞
• 月子会所ERP管理云平台GetCustomerCenterReceiveList存在SQL注入漏洞
• PoC泛微OA E-Cology /rest/ofs/ReceiveTodoRequestByXml XML 外部实体注入漏洞
• PoC万户ezOFFICE协同管理平台 /defaultroot/modules/govoffice/gov_documentmanager/receivefile_gd.jsp;.js SQL 注入漏洞
• PoCdahua-zhinengwulian-evo-runsv1-0receive-rce: 大华智能物联管理平台evo-runs/v1.0/receive接口存在远程命令执行漏洞
• PoCyonyou-filereceiveservlet-fileupload: Yonyou NC FileReceiveServlet - Aribitrary File Upload
• 大华智能物联网综合管理平台 push 存在命令执行漏洞
• 大华智能物联网综合管理平台 /evo-runs/v1.0/push 命令执行漏洞
• 大华智能物联网综合管理平台 /evo-runs/v1.0/receive 命令执行漏洞