CVE-2024-25291

This PoC demonstrates a remote code execution (RCE) vulnerability in DeskFiler 1.2.3 via Electron webview manipulation. The exploit involves crafting a malicious plugin that redirects to an attacker-controlled server, which then executes arbitrary commands (e.g., launching calc.exe).