CVE-2024-24576-PoC-BatBadBut

CVE-2024-24576-PoC-BatBadBut CVE-2024-24576 漏洞 "BatBadBut" 的 PoC 信息 运行脚本后，它会要求你输入一个参数，该参数将被传递给 bat 文件。如果你用 " 结束该参数并在其后加上 &，就可以运行任意 Windows 命令。 例如： root@kitploit: helloworld" & whoami 结果，你将执行 whoami 命令。 当然，在实际场景中不会是这个样子，这只是该 CVE 的 PoC。 用法 克隆仓库： root@kitploit: git clone...

CVE-2020-27955-LFS

Git-lfs 远程代码执行 RCE 漏洞利用 CVE-2020-27955 .bat / powershell 版本 受影响：git、GitHub CLI gh、GitHub Desktop、Visual Studio Code、SourceTree、SmartGit、GitKraken 等 发现者：Dawid Golunski https://legalhackers.com https://exploitbox.io 已在 Windows 上测试： git、GitHub CLI gh、GitHub Desktop、Visual Studio...

CVE-2022-21970

CVE-2022-21970 描述 Microsoft Edge（基于 Chromium）权限提升漏洞。 该漏洞允许攻击者在未经许可的情况下在每个主机上执行 JavaScript 代码，攻击者还可以窃取本地系统文件，并且能够操纵针对机器的操作，从而更改 Microsoft Edge 中的内部开发人员设置。 注意：在此示例中，Microsoft Edge 毫无问题地执行了恶意脚本。这只是一个恶意的 .bat 文件，用于重启受感染的机器，且仅用于测试！攻击者可以创建恶意文件，该文件可以实现权限提升、包含恶意软件、间谍软件或内核漏洞利用，从而严重危害你的设备！使用 MsEdge...

exe2powershell

exe2powershell exe2powershell - exe2bat renacido para Windows moderno exe2bat renacido en exe2powershell para Windows moderno exe2powershell se utiliza para convertir cualquier archivo binario .exe a un archivo BAT. El archivo BAT resultante contiene solo comandos "echo" y finalmente un comando d...

CVE-2024-24576-PoC-Python

CVE-2024-24576-Poc-Python 针对此漏洞的快速 POC，漏洞披露见 https://flatt.tech/research/posts/batbadbut-you-cant-securely-execute-commands-on-windows/ 运行脚本后，它会要求传递一个参数给 BAT 文件。 在截图中可以看到，通过添加双引号，Windows 用于调用 cmd 的底层 API 可以被绕过，从而实现任意命令执行，本例中我们打开了 calc.exe。 显然，这段代码本身并非恶意，它只是用于演示：即使经过清理的输入（除非你移除所有双引号），如果它调用的是 BAT...

Fake games spread stealers with RenPy Loader, MSBuild and EtherHiding

We have detected several campaigns using fake downloads of games, mods, cracks, and software to spread RenPy Loader. Once installed, the loader starts a complex, multi-stage infection chain that abuses MSBuild and the EtherHiding technique before ultimately delivering Amatera Stealer. Amatera is ...

RDPGuard 9.9.9 - Privilege Escalation

Exploit Title: RDPGuard 9.9.9 - Privilege Escalation Discovered by: Ahmet Ümit BAYRAM Discovered Date: 09.05.2025 Vendor Homepage: https://rdpguard.com Software Link: https://rdpguard.com/download.aspx Tested Version: 9.9.9 latest Tested on: Windows 10 32bit Steps to Reproduce 1. Prepare a .bat...

Exploit for CVE-2024-24576

CVE-2024-24576-Poc-Python A quick POC for the vulnerability di...

Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar

winDED Custom exploit for CVE-2023-38831 using python. Int...

PT-2023-30676 · Unknown · Opensupports

Name of the Vulnerable Software and Affected Versions: OpenSupports version 4.11.0 Description: The issue allows an attacker to bypass security restrictions and upload a .bat file by manipulating the file's magic bytes to masquerade as an allowed type in the comment function. This can enable the...

The vulnerability of clients for conducting real-time audio and video conferences via Zoom Client for Meetings for Windows allows a perpetrator to compromise the integrity of protected information.

The vulnerability of clients for conducting real-time audio and video conferences using the Zoom Client for Meetings for Windows involves an improper verification of the cryptographic signature. Exploiting this vulnerability can allow attackers to compromise the integrity of the protected...

Email-Worm.Win32.Lama Insecure Permissions

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/1c255ef6fd44877700867f94a59875d2.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Email-Worm.Win32.Lama Vulnerability: Insecure Permissions Description: The malware writes a ".BAT"...

PublicCMS has an unspecified vulnerability

PublicCMS is an open source content management system CMS written in Java from PublicCMS, China. publicCMS v4.0 contains a security vulnerability that stems from a problem in the BAT file parameters. An attacker can exploit this vulnerability to execute arbitrary code...

CVE-2021-40881

An issue in the BAT file parameters of PublicCMS v4.0 allows attackers to execute arbitrary code...

CVE-2021-40881

An issue in the BAT file parameters of PublicCMS v4.0 allows attackers to execute arbitrary code...

Code injection

An issue in the BAT file parameters of PublicCMS v4.0 allows attackers to execute arbitrary code...

CVE-2021-40881

An issue in the BAT file parameters of PublicCMS v4.0 allows attackers to execute arbitrary code...

CVE-2021-40881

Technical details for CVE-2021-40881 are not publicly available in the provided documents; monitor for updates.

PublicCMS 安全漏洞

PublicCMS is an open source content management system CMS written in Java from PublicCMS, China. publicCMS v4.0 contains a security vulnerability that stems from a problem in the BAT file parameters. An attacker can exploit this vulnerability to execute arbitrary code...

TrickBot Adds ActiveX Control, Hides Dropper in Images

The TrickBot banking trojan has gotten trickier, with the addition of a Windows 10 ActiveX control to execute malicious macros in boobytrapped documents. Michael Gorelik, researcher at Morphisec Labs, said that at least two dozen documents have come to light in the last few weeks that use ActiveX...