Improper neutralization of special elements used in a command ('command injection') in Windows PowerShell allows an unauthorized attacker to execute code locally.
[POC] CVE-2025-54100 — CVE-2025-54100
CVE-2025-54100 (CVSS 7.8 High) is a command injection vulnerability in the Invoke-WebRequest cmdlet of Windows PowerShell 5.1. It arises from improper neutralization of special elements during the automatic parsing of Web responses.
[POC] CVE-2025-54100 — CVE-2025-54100
CVE-2025-54100漏洞
[POC] CVE-2025-54100 — CVE-2025-54100-BYPASS-
CVE-2025-54100 POC "simple" Bypass Patch (working on 2026)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Get alerted for CVEs like this
Register your stack and get notified within minutes when a matching CVE drops.
Start monitoring free