CVE-2024-24576-PoC-Python

CVE-2024-24576-Poc-Python A quick POC for the vulnerability disclosed here https://flatt.tech/research/posts/batbadbut-you-cant-securely-execute-commands-on-windows/ After you run the script it will ask for an arg to be passed to the BAT file. In the screenshot you can see that by adding " the...

exe2powershell

exe2powershell exe2powershell - exe2bat renacido para Windows moderno exe2bat renacido en exe2powershell para Windows moderno exe2powershell se utiliza para convertir cualquier archivo binario .exe a un archivo BAT. El archivo BAT resultante contiene solo comandos "echo" y finalmente un comando d...

CVE-2022-21970

CVE-2022-21970 Description Microsoft Edge Chromium-based Elevation of Privilege Vulnerability. This vulnerability allows an attacker to execute javascript code on every host without permission, also an attacker can steal local system files, and also he can manipulate the actions against the machi...

CVE-2024-24576-PoC-BatBadBut

CVE-2024-24576-PoC-BatBadBut PoC for CVE-2024-24576 vulnerability "BatBadBut" Information After running the script will ask you for an argument, the argument will be passed the the bat file, if you close the argument with " and after that & you can run any Windows command. For example: helloworld...

CVE-2020-27955-LFS

Git-lfs Remote Code Execution RCE exploit CVE-2020-27955 .bat / powershell version Vulnerable: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken etc. Discovered by Dawid Golunski https://legalhackers.com https://exploitbox.io Tested on Windows on: git, GitHub...

Malicious code in python-walletlibr-v (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6783cffec9c8f9377babacd1cb4490a278bace564b34861bf49b35258be7220c python-walletlibr-v is a wallet-lookalike PyPI package that ships no wallet functionality — only a stub hello that prints 'Hello from my custom...

Fake games spread stealers with RenPy Loader, MSBuild and EtherHiding

We have detected several campaigns using fake downloads of games, mods, cracks, and software to spread RenPy Loader. Once installed, the loader starts a complex, multi-stage infection chain that abuses MSBuild and the EtherHiding technique before ultimately delivering Amatera Stealer. Amatera is ...

RDPGuard 9.9.9 - Privilege Escalation

Exploit Title: RDPGuard 9.9.9 - Privilege Escalation Discovered by: Ahmet Ümit BAYRAM Discovered Date: 09.05.2025 Vendor Homepage: https://rdpguard.com Software Link: https://rdpguard.com/download.aspx Tested Version: 9.9.9 latest Tested on: Windows 10 32bit Steps to Reproduce 1. Prepare a .bat...

Exploit for CVE-2024-24576

CVE-2024-24576-Poc-Python A quick POC for the vulnerability di...

Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar

winDED Custom exploit for CVE-2023-38831 using python. Int...

PT-2023-30676 · Unknown · Opensupports

Name of the Vulnerable Software and Affected Versions: OpenSupports version 4.11.0 Description: The issue allows an attacker to bypass security restrictions and upload a .bat file by manipulating the file's magic bytes to masquerade as an allowed type in the comment function. This can enable the...

The vulnerability of clients for conducting real-time audio and video conferences via Zoom Client for Meetings for Windows allows a perpetrator to compromise the integrity of protected information.

The vulnerability of clients for conducting real-time audio and video conferences using the Zoom Client for Meetings for Windows involves an improper verification of the cryptographic signature. Exploiting this vulnerability can allow attackers to compromise the integrity of the protected...

Email-Worm.Win32.Lama Insecure Permissions

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/1c255ef6fd44877700867f94a59875d2.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Email-Worm.Win32.Lama Vulnerability: Insecure Permissions Description: The malware writes a ".BAT"...

PublicCMS has an unspecified vulnerability

PublicCMS is an open source content management system CMS written in Java from PublicCMS, China. publicCMS v4.0 contains a security vulnerability that stems from a problem in the BAT file parameters. An attacker can exploit this vulnerability to execute arbitrary code...

CVE-2021-40881

An issue in the BAT file parameters of PublicCMS v4.0 allows attackers to execute arbitrary code...

CVE-2021-40881

An issue in the BAT file parameters of PublicCMS v4.0 allows attackers to execute arbitrary code...

Code injection

An issue in the BAT file parameters of PublicCMS v4.0 allows attackers to execute arbitrary code...

CVE-2021-40881

An issue in the BAT file parameters of PublicCMS v4.0 allows attackers to execute arbitrary code...

CVE-2021-40881

Technical details for CVE-2021-40881 are not publicly available in the provided documents; monitor for updates.

PT-2021-22999

Name of the Vulnerable Software and Affected Versions PublicCMS version 4.0 Description An issue in the BAT file parameters allows attackers to execute arbitrary code. Recommendations For PublicCMS version 4.0, at the moment, there is no information about a newer version that contains a fix for...