fix: remove unsafe exec() in TwinUIPatches.cpp

[orbisai0security]

Summary

Fix critical severity security issue in ExplorerPatcher/TwinUIPatches.cpp.

Vulnerability

Field	Value
ID	V-008
Severity	CRITICAL
Scanner	multi_agent_ai
Rule	V-008
File	ExplorerPatcher/TwinUIPatches.cpp:1557

Description: TwinUIPatches.cpp explicitly writes shellcode payloads directly into the Windows Explorer process address space using memcpy. If an attacker can modify the shellcode buffer in memory before the write executes — for example, via DLL injection, a race condition, or by exploiting another vulnerability — the attacker's payload is injected into Explorer's executable memory and subsequently executed with Explorer's full user-level privileges.

Changes

• ExplorerPatcher/TwinUIPatches.cpp

Verification

• Build passes
• Scanner re-scan confirms fix
• LLM code review passed

---

Automated security fix by OrbisAI Security