## https://sploitus.com/exploit?id=C2C0EA2F-AF87-5067-94A3-43F5A2432E11
# MDPOCS
POCs written by the Cat Egg Safety team – if you report a vulnerability, we can fix it. Vulnerability list:
1. Metabase: Remote command execution vulnerability
2. Hikvision: ResourceOperations arbitrary file upload vulnerability
3. Openfire: Permission bypass vulnerability
4. Wanxin E-Mobile 6.0-6.5: Front-end RCE vulnerability
5. Kingdee OA C6: GetSqlData.aspx SQL injection vulnerability leading to RCE
6. WeChat API information leakage vulnerability
7. Lanling OA: treexml.tmpl remote command execution vulnerability
8. Lanling OA: Custom.jsp arbitrary file reading vulnerability
9. Changjietong T+: GetStoreWarehouseByStore RCE vulnerability
10. Kingdee Cloud: Kingdee-erp-Unserialize-RCE vulnerability
11. nginxWebUI: Remote command execution vulnerability
12. Hikvision: Report arbitrary file upload vulnerability
13. Wanxin E-Office: Uploadify file upload vulnerability (CVE-2023-2648)
14. Wanxin E-Office OfficeServer: File upload vulnerability
15. Hongjing HCM: codesettree SQL injection vulnerability
16. Yonyou KOSpace: KSOA QueryService SQL injection vulnerability
17. HIKVISION: Video encoding device gateway showFile.php arbitrary file download vulnerability
18. Grean SAS: Fortress GetFile arbitrary file reading vulnerability // Currently has IP access restrictions
19. Grean SAS: Fortress local_user.php arbitrary user login vulnerability
20. Grean SAS: Fortress Exec remote command execution vulnerability // Currently allows modification of payload
21. PigCMS: action_flashUpload arbitrary file upload vulnerability
22. Ruijie NBR router: fileupload.php arbitrary file upload vulnerability
23. NetGiant SecGate 3600 firewall: arbitrary file upload vulnerability
24. Qiwang Manufacturing ERP system: comboxstore RCE vulnerability
25. Renwu CRM: TypeId SQL injection vulnerability
26. Dahua Smart Parking Management Platform: getFaceCapture SQL injection vulnerability
27. Guanglianda OA: GetIMDictionary front-end SQL injection
28. Guanglianda OA: msgbroadcastuploadfile back-end file upload
29. Hongfan OA: Ioffice Udfmr.asmx SQL injection vulnerability
30. VMware Aria Operations: SSH hardcoding and key cracking vulnerability
31. Ruijie Smartweb management system: EXCU_SHELL information leakage vulnerability
32. Yonyou GRP-U8: bx_historyDataCheck.jsp SQL injection vulnerability
33. EasyCVR: video surveillance aggregation platform user information leakage vulnerability
34. Jinpan Library: WeChat management backend information leakage vulnerability
35. Hongjing HCM: KhFieldtree interface SQL injection
36. RichMail: enterprise email sensitive information leakage vulnerability
37. F5 BIG-IP: remote code execution vulnerability (CVE-2023-46747)
38. XXL-JOB: default accessToken identity bypass RCE vulnerability
39. IP-guard Webserver view: remote command execution vulnerability
40. Yonyou NC Cloud: upload_chunk arbitrary file upload vulnerability
41. Kingdee Cloud: ScpSupRegHandler arbitrary file upload
42. ArrayVPN: fshare_template arbitrary file reading
43. Kingdee Apusic: application server arbitrary file upload
44. Suda Software: all products have arbitrary file upload vulnerabilities
45. Hikvision: IP network intercom broadcast system command execution vulnerability
46. Oculus: video cloud platform arbitrary file download vulnerability
47. Apache Ofbiz: XML-RPC RCE vulnerability
48. Feiqi Internet-FE: enterprise operation management platform login bypass vulnerability
49. Likeshop: userFormImage arbitrary file upload
50. Atlassian Confluence: remote code execution vulnerability (CVE-2023-22527)
51. YouDianCMS: arbitrary file upload vulnerability
52. Yonyou U8-OA collaborative work system: doUpload.jsp interface arbitrary file upload vulnerability
53. Dahua EIMS: captureCommand remote command execution vulnerability
54. Yonyou NC Cloud: importhttpscer interface has arbitrary file upload vulnerability
Public account: Cat Egg Safety