CVE-2020-27955-LFS

Git-lfs Remote Code Execution RCE exploit CVE-2020-27955 .bat / versione powershell Vulnerabile: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken ecc. Scoperto da Dawid Golunski https://legalhackers.com https://exploitbox.io Testato su Windows su: git, GitHu...

CVE-2020-27955

Git-lfs Remote Code Execution RCE exploit CVE-2020-27955 versione .bat/powershell Vulnerabili: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken ecc. Scoperto da Dawid Golunski https://legalhackers.com https://exploitbox.io Testato su Windows su: git, GitHub...

CVE-2024-24576-PoC-Python

CVE-2024-24576-Poc-Python Un rapido POC per la vulnerabilità divulgata qui https://flatt.tech/research/posts/batbadbut-you-cant-securely-execute-commands-on-windows/ Dopo aver eseguito lo script, ti verrà chiesto di passare un arg al file BAT. Nello screenshot puoi vedere che aggiungendo " l'API...

bat

Behavioral Adversary Tracer BAT BAT è un modello di minaccia avversario realistico e in evoluzione per Linux e Windows. Non è un framework C2 e non è un rootkit. È una piattaforma completa di simulazione di minacce che integra comunicazione C2, moduli rootkit stealth a livello di kernel, evasione...

CVE-2020-27955-LFS

Git-lfs Remote Code Execution RCE Exploit CVE-2020-27955 .bat / PowerShell-Version Betroffen: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken usw. Entdeckt von Dawid Golunski https://legalhackers.com https://exploitbox.io Getestet unter Windows auf: git,...

CVE-2024-24576-PoC-BatBadBut

CVE-2024-24576-PoC-BatBadBut PoC per la vulnerabilità CVE-2024-24576 "BatBadBut" Informazioni Dopo l'esecuzione, lo script ti chiederà un argomento; l'argomento verrà passato al file bat. Se chiudi l'argomento con " e subito dopo aggiungi &, puoi eseguire qualsiasi comando Windows. Ad esempio:...

exe2powershell

exe2powershell exe2powershell - exe2bat rinato per Windows moderno exe2bat rinato in exe2powershell per Windows moderno exe2powershell è utilizzato per convertire qualsiasi file binario .exe in un file BAT. Il file BAT risultante contiene solo il comando "echo" e infine un comando powershell per...

CVE-2023-38831

CVE-2023-38831 Ein POC-Demo zu CVE-2023-38831 Kurzbeschreibung der Schwachstelle CVE-2023-38831 ist eine Softwareschwachstelle. Die ausgenutzte Software ist WinRAR, das von fast jedem weit verbreitet verwendet wird. Es ist eine Software, die verschiedene Dokumente oder Dateien in kleine Archive...

CVE-2022-21970

CVE-2022-21970 Descrizione Vulnerabilità di elevazione dei privilegi in Microsoft Edge basato su Chromium. Questa vulnerabilità consente a un attaccante di eseguire codice javascript su qualsiasi host senza permesso; un attaccante può anche rubare file di sistema locali e manipolare le azioni sul...

LazySign

LazySign Erstellen Sie gefälschte Zertifikate für Binärdateien mit Windows-Binärdateien und der Leistungsfähigkeit von Bat-Dateien Im Laufe der Jahre wurden mehrere coole Tools veröffentlicht, die gefälschte Signaturen für Binärdateien stehlen oder fälschen können. Alle diese Tools haben jedoch...

[SECURITY] Fedora 43 Update: rust-bat-0.26.1-3.fc43

A cat1 clone with wings...

[SECURITY] Fedora 44 Update: rust-bat-0.26.1-3.fc44

A cat1 clone with wings...

Fake games spread stealers with RenPy Loader, MSBuild and EtherHiding

We have detected several campaigns using fake downloads of games, mods, cracks, and software to spread RenPy Loader. Once installed, the loader starts a complex, multi-stage infection chain that abuses MSBuild and the EtherHiding technique before ultimately delivering Amatera Stealer. Amatera is ...

PYSEC-2026-1691 nbconvert has an uncontrolled search path that leads to unauthorized code execution on Windows

Summary On Windows, converting a notebook containing SVG output to a PDF results in unauthorized code execution. Specifically, a third party can create a inkscape.bat file that defines a Windows batch script, capable of arbitrary code execution. When a user runs jupyter nbconvert --to pdf on a...

MAL-2026-6380 Malicious code in system-core-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a1d575b5be4daa71ffea6c37e5990b0396f864234cb5f0488c11332cdd7e4d3 On require/import, src/index.js shell-executes a hidden PowerShell one-liner that downloads launcher.bat from an anonymous Cloudflare R2 bucket...

Malicious code in roblox-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06fae89087d7a50d6397199d5fe1d5fc925c7c353e72a7f8a84e9aeca08224e6 On npm install, postinstall.js fetches http://betterminecraft.fun/nettspend.bat over plain HTTP, writes it to the OS temp directory, and executes it...

SUSE CVE-2026-46238

In the Linux kernel, the following vulnerability has been resolved: batman-adv: stop caching unowned originator pointers in BAT IV BAT IV keeps the last-hop neighbor address in each neighnode, but some paths also cache an originator pointer derived from a temporary lookup. That pointer is not own...

CVE-2026-46238

A flaw was found in the batman-adv module of the Linux kernel. The BAT IV protocol was caching unowned originator pointers, which could become invalid after purge handling. This could lead to the use of stale data, potentially causing unexpected system behavior or information corruption within th...

CVE-2026-46238

In the Linux kernel, the following vulnerability has been resolved: batman-adv: stop caching unowned originator pointers in BAT IV BAT IV keeps the last-hop neighbor address in each neighnode, but some paths also cache an originator pointer derived from a temporary lookup. That pointer is not own...

UBUNTU-CVE-2026-46238

In the Linux kernel, the following vulnerability has been resolved: batman-adv: stop caching unowned originator pointers in BAT IV BAT IV keeps the last-hop neighbor address in each neighnode, but some paths also cache an originator pointer derived from a temporary lookup. That pointer is not own...