CVE-2023-33137

The exploit leverages a VBA macro in Microsoft Excel to execute arbitrary commands via a POST request to an attacker-controlled server, downloading and executing a malicious batch file. It demonstrates a remote code execution (RCE) vulnerability in Microsoft 365 MSO (Version 2305 Build 16.0.16501.20074) 32-bit.