That's just MoTW, I've verified it works. No prompts required. I think someone could realistically click on that.pic.twitter.com/VwYGB5il48
You can add location information to your Tweets, such as your city or precise location, from the web and via third-party applications. You always have the option to delete your Tweet location history. Learn more
So exploit.bat in these examples isn’t already on your computer waiting to be executed? If not where is it coming from?
It's not a vulnerability to download files, web browsers will download files automatically without prompting. It is trivial (and not a bug) to populate Downloads with malicious files, this bug will then execute it without prompting.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.