Lucene search
+L

5 matches found

NVD
NVD
•added 2026/10/20 4:17 p.m.•3 views

CVE-2026-113609

Bandisoft Bandizip before 7.47 fails to propagate Mark-of-the-Web to extracted .ps1 and .psm1 files, allowing attackers to bypass zone-based execution protections. Attackers can deliver unsigned PowerShell scripts or modules in downloaded archives that run under the RemoteSigned policy when the...

4.8CVSS
SaveExploits0References2
CVE
CVE
•added 2026/10/20 3:40 p.m.•3 views

CVE-2026-113609

Versions of Bandisoft Bandizip prior to 7.47 are vulnerable to a Mark-of-the-Web (MotW) bypass affecting .ps1 and .psm1 files. The application fails to propagate MotW protections to these extracted files, which allows attackers to deliver unsigned PowerShell scripts or modules within downloaded a...

4.8CVSS5.9AI score
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/20 3:40 p.m.•6 views

CVE-2026-113609 Bandisoft Bandizip before 7.47 Mark-of-the-Web Bypass for PowerShell Scripts

Bandisoft Bandizip before 7.47 fails to propagate Mark-of-the-Web to extracted .ps1 and .psm1 files, allowing attackers to bypass zone-based execution protections. Attackers can deliver unsigned PowerShell scripts or modules in downloaded archives that run under the RemoteSigned policy when the...

4.8CVSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/10/20 3:40 p.m.•3 views

CVE-2026-113609 Bandisoft Bandizip before 7.47 Mark-of-the-Web Bypass for PowerShell Scripts

Bandisoft Bandizip before 7.47 fails to propagate Mark-of-the-Web to extracted .ps1 and .psm1 files, allowing attackers to bypass zone-based execution protections. Attackers can deliver unsigned PowerShell scripts or modules in downloaded archives that run under the RemoteSigned policy when the...

4.8CVSS5.9AI score
SaveExploits0References2
EUVD
EUVD
•added 2026/10/20 3:40 p.m.•4 views

EUVD-2026-105087

Bandisoft Bandizip before 7.47 fails to propagate Mark-of-the-Web to extracted .ps1 and .psm1 files, allowing attackers to bypass zone-based execution protections. Attackers can deliver unsigned PowerShell scripts or modules in downloaded archives that run under the RemoteSigned policy when the...

4.8CVSS5.9AI score
SaveExploits0References2
Rows per page
Query Builder