CVE-2024-24576-PoC-BatBadBut

CVE-2024-24576-PoC-BatBadBut PoC para a vulnerabilidade CVE-2024-24576 "BatBadBut" Informação Após executar o script, ele pedirá um argumento. O argumento será passado para o arquivo bat. Se você fechar o argumento com " e depois &, pode executar qualquer comando do Windows. Por exemplo:...

CVE-2024-24576-PoC-Python

CVE-2024-24576-Poc-Python POC سريع للثغرة الأمنية المُعلن عنها هنا https://flatt.tech/research/posts/batbadbut-you-cant-securely-execute-commands-on-windows/ بعد تشغيل السكربت، سيطلب منك تمرير وسيط arg إلى ملف BAT. في لقطة الشاشة يمكنك أن ترى أنه بإضافة " يمكن تجاوز واجهة برمجة التطبيقات API...

CVE-2020-27955-LFS

Git-lfs Remote Code Execution RCE Exploit CVE-2020-27955 .bat / PowerShell-Version Betroffen: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken usw. Entdeckt von Dawid Golunski https://legalhackers.com https://exploitbox.io Getestet unter Windows auf: git,...

exe2powershell

exe2powershell exe2powershell - exe2bat rinato per Windows moderno exe2bat rinato in exe2powershell per Windows moderno exe2powershell è utilizzato per convertire qualsiasi file binario .exe in un file BAT. Il file BAT risultante contiene solo il comando "echo" e infine un comando powershell per...

CVE-2022-21970

CVE-2022-21970 Descrizione Vulnerabilità di elevazione dei privilegi in Microsoft Edge basato su Chromium. Questa vulnerabilità consente a un attaccante di eseguire codice javascript su qualsiasi host senza permesso; un attaccante può anche rubare file di sistema locali e manipolare le azioni sul...

Fake games spread stealers with RenPy Loader, MSBuild and EtherHiding

We have detected several campaigns using fake downloads of games, mods, cracks, and software to spread RenPy Loader. Once installed, the loader starts a complex, multi-stage infection chain that abuses MSBuild and the EtherHiding technique before ultimately delivering Amatera Stealer. Amatera is ...

RDPGuard 9.9.9 - Privilege Escalation

Exploit Title: RDPGuard 9.9.9 - Privilege Escalation Discovered by: Ahmet Ümit BAYRAM Discovered Date: 09.05.2025 Vendor Homepage: https://rdpguard.com Software Link: https://rdpguard.com/download.aspx Tested Version: 9.9.9 latest Tested on: Windows 10 32bit Steps to Reproduce 1. Prepare a .bat...

Exploit for CVE-2024-24576

CVE-2024-24576-Poc-Python A quick POC for the vulnerability di...

Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar

winDED Custom exploit for CVE-2023-38831 using python. Int...

PT-2023-30676 · Unknown · Opensupports

Name of the Vulnerable Software and Affected Versions: OpenSupports version 4.11.0 Description: The issue allows an attacker to bypass security restrictions and upload a .bat file by manipulating the file's magic bytes to masquerade as an allowed type in the comment function. This can enable the...

The vulnerability of clients for conducting real-time audio and video conferences via Zoom Client for Meetings for Windows allows a perpetrator to compromise the integrity of protected information.

The vulnerability of clients for conducting real-time audio and video conferences using the Zoom Client for Meetings for Windows involves an improper verification of the cryptographic signature. Exploiting this vulnerability can allow attackers to compromise the integrity of the protected...

Email-Worm.Win32.Lama Insecure Permissions

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/1c255ef6fd44877700867f94a59875d2.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Email-Worm.Win32.Lama Vulnerability: Insecure Permissions Description: The malware writes a ".BAT"...

PublicCMS has an unspecified vulnerability

PublicCMS is an open source content management system CMS written in Java from PublicCMS, China. publicCMS v4.0 contains a security vulnerability that stems from a problem in the BAT file parameters. An attacker can exploit this vulnerability to execute arbitrary code...

CVE-2021-40881

An issue in the BAT file parameters of PublicCMS v4.0 allows attackers to execute arbitrary code...

CVE-2021-40881

An issue in the BAT file parameters of PublicCMS v4.0 allows attackers to execute arbitrary code...

Code injection

An issue in the BAT file parameters of PublicCMS v4.0 allows attackers to execute arbitrary code...

CVE-2021-40881

An issue in the BAT file parameters of PublicCMS v4.0 allows attackers to execute arbitrary code...

CVE-2021-40881

Technical details for CVE-2021-40881 are not publicly available in the provided documents; monitor for updates.

PublicCMS 安全漏洞

PublicCMS is an open source content management system CMS written in Java from PublicCMS, China. publicCMS v4.0 contains a security vulnerability that stems from a problem in the BAT file parameters. An attacker can exploit this vulnerability to execute arbitrary code...

TrickBot Adds ActiveX Control, Hides Dropper in Images

The TrickBot banking trojan has gotten trickier, with the addition of a Windows 10 ActiveX control to execute malicious macros in boobytrapped documents. Michael Gorelik, researcher at Morphisec Labs, said that at least two dozen documents have come to light in the last few weeks that use ActiveX...