Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-118956. PoCs published by Hesam Bazvand.
AI-analyzed exploit summary This exploit leverages CVE-2014-6332 (MS14-064) to achieve remote code execution via a malicious HTTP server that serves a VBScript payload. The payload exploits a vulnerability in Windows OLE automation to execute arbitrary commands.
Description
Netsparker 2.3.x - Remote Code Execution
Exploits (1)
exploitdb
WORKING POC
by Hesam Bazvand · pythonremotewindows
https://www.exploit-db.com/exploits/37746
This exploit leverages CVE-2014-6332 (MS14-064) to achieve remote code execution via a malicious HTTP server that serves a VBScript payload. The payload exploits a vulnerability in Windows OLE automation to execute arbitrary commands.
Classification
Working Poc 90%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target:
Netsparker 2.3.x (via MS14-064 vulnerability in Windows)
No auth needed
Prerequisites:
Victim must visit the malicious URL in Netsparker during a scan · Target must be vulnerable to MS14-064 (CVE-2014-6332)
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026