CVE-2025-41359 Small HTTP Server 未引用服务路径漏洞

# PoC to check for Unquoted Service Path Vulnerability # This script checks if the service path is quoted and contains spaces. $serviceName = "SmallHTTPServer" # Adjust service name if necessary try { $service = Get-WmiObject -Class Win32_Service -Filter "Name='$serviceName'" -ErrorAction Stop $path = $service.PathName Write-Host "Service Path: $path" # Check if path is quoted if ($path -notmatch '^"') { Write-Host "[!] Vulnerable: The service path is not quoted." # Check if path contains spaces, which makes it exploitable if ($path -match ' ') { Write-Host "[+] Exploitable: Path contains spaces." Write-Host "[!] An attacker can place a malicious executable in:" Write-Host " C:\Program.exe" Write-Host " C:\Program Files.exe" } else { Write-Host "[-] Not exploitable via spaces (but still bad practice)." } } else { Write-Host "[+] Safe: The service path is properly quoted." } } catch { Write-Host "Error: Service '$serviceName' not found." }