WinBatch® Technical Support Forum

All Things WinBatch => WinBatch => Topic started by: td on July 15, 2025, 02:01:52 PM

Title: ************ WinBatch+Compiler 2025C Release ************
Post by: td on July 15, 2025, 02:01:52 PM
WinBatch, WebBatch, and WinBatch+Compiler 2025C are now available for download.

Users with a current license may download the latest version of the software from the download page.

https://www.winbatch.com/download.html - use the "Click here to download WinBatch+Compiler" link.

If you do not have a current license and are interested in this and future releases, please visit our software purchase page. You can easily order online.

https://commerce.winbatch.com

Release notes:
 WB 2025C 2025 Jul 15, 2025 

 DLL 6.25cyc First appearing in WB 2025C

   Address issue in the CredMan function that caused the password returned by the "read"
   command to become corrupt intermittently.

  WebBatch

   <!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!IMPORTANT!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!>
    This release addresses a security issue that causes a remote code execution vulnerability.
    The exploit allows an attacker to execute system commands with a specially crafted URL.*
     
    *Many thanks to Marc Olivier Bergeron and Simon Bouchard of GoSecure for identifying this
     issue.   

Title: Re: ************ WinBatch+Compiler 2025C Release ************
Post by: spl on July 16, 2025, 08:59:05 AM
I was about to say that Credman() has it over cmdkey in that the latter cannot retrieve creds, but I was thinking cmdkey /list was a missing element until I read the documentation and saw the keyword "Enum" - very, very cool.