漏洞描述 Windows 中多个编程语言(Rust\PHP)中存在命令注入漏洞(漏洞被命名为 BatBadBut)。该漏洞源于在满足特定条件时,间接依赖于 CreateProcess 函数的 Windows 应用程序存在命令注入问题。
相关漏洞推荐 Windows PolicyConfiguration 计划任务特权提升漏洞(CVE-2025-60710) Windows 11 PolicyConfiguration 计划任务特权提升漏洞(CVE-2025-60710) Windows NTLMv2-SSP Hash信息泄露漏洞(CVE-2025-50154) POC CVE-2015-1635: Microsoft Windows 'HTTP.sys' - Remote Code Execution POC CVE-2017-7269: Windows Server 2003 & IIS 6.0 - Remote Code Execution POC CVE-2024-38472: Apache HTTPd Windows UNC - Server-Side Request Forgery POC generic-windows-lfi: Generic Windows based LFI Test POC automatic-windows-updates-disabled: Automatic Windows Updates Disabled POC sticky-keys-enabled-login: Sticky Keys Enabled at Login Screen POC windows-active-desktop-enabled: Active Desktop Enabled POC windows-administrative-shares-enabled: Administrative Shares Enabled POC windows-administrator-blank-password: Built-in Administrator Account Has Blank Password POC windows-anonymous-sid-enumeration-allowed: Windows Allows Anonymous SID Enumeration