38 matches found
wsh
wsh wsh（发音为woosh）是一个Web Shell生成器和命令行界面。最初它只是一个HTTP客户端，因为与Web Shell交互很麻烦。通常有一个表单，要发送命令，你必须在输入框中输入并点击按钮。我希望有一个更适合自己工作流程的工具，并在终端中运行。于是wsh应运而生。 该客户端具有命令历史、日志记录功能，并可配置为与之前部署的标准Web Shell（带有表单/按钮）进行交互。生成器可以创建php、asp和jsp格式的Web...
Malicious code in booking-eligibility (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c93f5b06720659d8e0cc8efb7d6bd75f577605e84c27cfb600a795081c27654 package.json declares a postinstall lifecycle hook wscript.exe 4444.vbs that runs Windows Script Host against a .vbs file on npm install. The...
GadgetToJScript
Description A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from JS/VBS/VBA scripts. The current gadget triggers a call to Activator.CreateInstance when deserialized using BinaryFormatter from jscript/vbscript/vba...
CVE-2024-57211
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the modifyOne parameter in the enablewsh function...
PT-2025-3409 · Totolink · Totolink X6000R
Name of the Vulnerable Software and Affected Versions: TOTOLINK A6000R version V1.0.1-B20201211.2000 Description: A command injection issue was discovered via the modifyOne parameter in the enable wsh function. This allows for potential exploitation. Recommendations: For TOTOLINK A6000R version...
CVE-2023-1003
A vulnerability, which was classified as critical, was found in Typora up to 1.5.5 on Windows. Affected is an unknown function of the component WSH JScript Handler. The manipulation leads to code injection. An attack has to be approached locally. The exploit has been disclosed to the public and m...
Code injection
A vulnerability, which was classified as critical, was found in Typora up to 1.5.5 on Windows. Affected is an unknown function of the component WSH JScript Handler. The manipulation leads to code injection. An attack has to be approached locally. The exploit has been disclosed to the public and m...
Typora 代码注入漏洞
Typora is an editor. A code injection vulnerability exists in versions prior to Typora 1.5.8, which stems from a problem with the component WSH JScript Handle that can lead to code injection...
CVE-2023-1004
A vulnerability has been found in MarkText up to 0.17.1 on Windows and classified as critical. Affected by this vulnerability is an unknown functionality of the component WSH JScript Handler. The manipulation leads to code injection. Local access is required to approach this attack. The exploit h...
Code injection
A vulnerability has been found in MarkText up to 0.17.1 on Windows and classified as critical. Affected by this vulnerability is an unknown functionality of the component WSH JScript Handler. The manipulation leads to code injection. Local access is required to approach this attack. The exploit h...
CVE-2023-1004 MarkText WSH JScript code injection
A vulnerability has been found in MarkText up to 0.17.1 on Windows and classified as critical. Affected by this vulnerability is an unknown functionality of the component WSH JScript Handler. The manipulation leads to code injection. Local access is required to approach this attack. The exploit h...
CVE-2023-1004 MarkText WSH JScript code injection
A vulnerability has been found in MarkText up to 0.17.1 on Windows and classified as critical. Affected by this vulnerability is an unknown functionality of the component WSH JScript Handler. The manipulation leads to code injection. Local access is required to approach this attack. The exploit h...
CVE-2023-1004 MarkText WSH JScript code injection
A vulnerability has been found in MarkText up to 0.17.1 on Windows and classified as critical. Affected by this vulnerability is an unknown functionality of the component WSH JScript Handler. The manipulation leads to code injection. Local access is required to approach this attack. The exploit h...
CVE-2023-1003 Typora WSH JScript code injection
A vulnerability, which was classified as critical, was found in Typora up to 1.5.5 on Windows. Affected is an unknown function of the component WSH JScript Handler. The manipulation leads to code injection. An attack has to be approached locally. The exploit has been disclosed to the public and m...
CVE-2023-1003
Typora (on Windows) up to v1.5.5 contains a code injection vulnerability in the WSH JScript Handler component. The issue requires local access to exploit and has been publicly disclosed. Upgrading to v1.5.8 fixes the flaw; as a temporary workaround, restrict access to the WSH JScript Handler. Aff...
CVE-2023-1003: Improper Control of Generation of Code
A vulnerability, which was classified as critical, was found in Typora up to 1.5.5 on Windows. Affected is an unknown function of the component WSH JScript Handler. The manipulation leads to code injection. An attack has to be approached locally. The exploit has been disclosed to the public and m...
CVE-2023-1004: Improper Control of Generation of Code
A vulnerability has been found in MarkText up to 0.17.1 on Windows and classified as critical. Affected by this vulnerability is an unknown functionality of the component WSH JScript Handler. The manipulation leads to code injection. Local access is required to approach this attack. The exploit h...
Double Vision: Stealthy Malware Dropper Delivers Dual RATs
A newly discovered initial-stage malware dropper has been discovered sneaking by antivirus products, with the ultimate goal of delivering a double-pronged whammy of RevengeRAT and WSH RAT payloads onto targeted Windows machines. A FortiGuard Labs team recently captured a sample file that had been...
CVE-2018-0884
Windows Scripting Host WSH in Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows a security feature bypass vulnerability due to how objects are handled in memory, aka "Windows Security Feature Bypass Vulnerability". This CVE is unique from...