CVE-2024-9950

This PoC exploits a local privilege escalation vulnerability in Forescout SecureConnector by monitoring a temporary directory for newly created .bat files and replacing them with a malicious script. The exploit leverages a FileSystemWatcher to detect file creation events and hijacks the file by renaming the original and replacing it with a controlled script.