References https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E5%90%AF%E6%98%8E%E6%98%9F%E8%BE%B0/%E5%90%AF%E6%98%8E%E6%98%9F%E8%BE%B0-%E5%A4%A9%E6%B8%85%E6%B1%89%E9%A9%ACVPN%E6%8E%A5%E5%8F%A3download%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96.md https://stack.chaitin.com/vuldb/detail/88e46b00-9824-447d-8e2b-ba951f40408c https://blog.csdn.net/LiangYueSec/article/details/140486174 https://www.ddpoc.com/DVB-2021-2889.html https://cn-sec.com/archives/3006958.html https://rivers.chaitin.cn/blog/cqli6s90lnec5jjug6h0 https://gitea.com/Run0nceEx/POC https://github.com/ffffffff0x/1earn/blob/master/1earn/Security/RedTeam/%E5%AE%89%E9%98%B2%E8%AE%BE%E5%A4%87/SecDevice-Exploits.md?plain=1 https://wiki.shikangsi.com/list/all/?page=75 https://rivers.chaitin.cn/s?keywords=%E8%AF%81%E4%B9%A6 https://peiqi.wgpsec.org/dynamic/ https://www.saury.net/poc-navigation https://gobysec.net/goExp
Related Vulnerabilities上海小羚羊软件股份有限公司小羚羊ERP系统downloadView存在任意文件读取漏洞仁和兴业(深圳)软件有限公司仁和云ERP attachmentdownloadAttachment 接口存在任意文件读取漏洞玉帛软件仓库管理系统DownloadFile存在任意文件读取漏洞安科瑞EMS企业微电网能效管理平台 /SubstationWEBV2/main/appDownload 文件读取漏洞云连ERP管理系统 /gateway/download!download.action 代码执行漏洞泛微 e-cology10 /papi/em/transform/downLoadSyslog 文件读取漏洞方向标邮件网关 /common/cgi/download.cgi 代码执行漏洞通天星CMSV6车载视频监控平台 /808gps/StandardLoginAction_downLoad.action 文件读取漏洞天地伟业 Easy7 /Easy7/rest/downLoad/downLoadImage 文件读取漏洞PoCCVE-2021-4463: Longjing Technology BEMS API 1.21 - Unauthenticated Arbitrary File Download金叶物联网大数据管理平台 /data/file/download 文件读取漏洞水利信息化平台 /stAlarmInfo/download.do;stAlarmlogout.do 文件读取漏洞指挥调度管理平台 /app/dbtool/db_backup_download.php 信息泄露漏洞