CVE-2021-47886

Pingzapper 2.3.1 contains an unquoted service path vulnerability in the PingzapperSvc service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files x86\Pingzapper\PZService.exe' to inject malicious executables and escalate...

CVE-2021-47869

Brother BRAdmin Professional 3.75 contains an unquoted service path vulnerability in the BRAScheduler service that allows local users to potentially execute arbitrary code. Attackers can place a malicious executable named 'BRAdmin' in the C:\Program Files x86\Brother\ directory to gain local syst...

CVE-2021-47884

Affected product and vulnerability: OKI Configuration Tool 1.6.53 with an unquoted service path in the OKI Local Port Manager service. The unquoted path is in 'C:\Program Files\Okidata\Common\extend3\portmgrsrv.exe', which can allow a local attacker to inject a malicious executable and escalate p...

CVE-2021-47880

Realtek Wireless LAN Utility 700.1631 contains an unquoted service path vulnerability that allows local users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted service path by inserting malicious code in the system root path that would execute during...

CVE-2021-47863 MacPaw Encrypto 1.0.1 - 'Encrypto Service' Unquoted Service Path

MacPaw Encrypto 1.0.1 contains an unquoted service path vulnerability in its Encrypto Service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files\Encrypto\ to inject malicious executables and escalate...

CVE-2021-47863 MacPaw Encrypto 1.0.1 - 'Encrypto Service' Unquoted Service Path

MacPaw Encrypto 1.0.1 contains an unquoted service path vulnerability in its Encrypto Service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files\Encrypto\ to inject malicious executables and escalate...

CVE-2021-47861

Event Log Explorer 4.9.3 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted service path by placing malicious executables in specific file system locations that will be...

CVE-2021-47861 Event Log Explorer 4.9.3 - 'ElodeaEventCollectorService' Unquoted Service Path

Event Log Explorer 4.9.3 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted service path by placing malicious executables in specific file system locations that will be...

CVE-2021-47859

ActivIdentity 8.2 contains an unquoted service path vulnerability in the ac.sharedstore service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted binary path in C:\Program Files\Common Files\ActivIdentity\ to inject malicious executables and...

EUVD-2026-3633

ActivIdentity 8.2 contains an unquoted service path vulnerability in the ac.sharedstore service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted binary path in C:\Program Files\Common Files\ActivIdentity\ to inject malicious executables and...

Fyrolabs Pingzapper code issue vulnerability

Fyrolabs Pingzapper is a web accelerator developed by Fyrolabs Corporation in the United States. The version 2.3.1 of Fyrolabs Pingzapper contains a code vulnerability. This vulnerability stems from an unquoted service path within the PingzapperSvc service, which may allow local attackers to...

PT-2026-3835

OKI Configuration Tool 1.6.53 contains an unquoted service path vulnerability in the OKI Local Port Manager service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:Program FilesOkidataCommonextend3portmgrsrv.exe' to inject malicious...

PT-2026-3815

MacPaw Encrypto 1.0.1 contains an unquoted service path vulnerability in its Encrypto Service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:Program FilesEncrypto to inject malicious executables and escalate privileges...

MacPaw Encrypto code-related vulnerabilities

MacPaw Encrypto is a cross-platform file encryption tool developed by the Ukrainian company MacPaw. Version 1.0.1 of MacPaw Encrypto contains a code vulnerability. This vulnerability stems from the Encrypto Service’s configuration, where a service path without quotes was used, potentially allowin...

Brother BRAdmin Professional code-related vulnerabilities

Brother BRAdmin Professional is a device management software developed by the American company Brother. Version 3.75 of Brother BRAdmin Professional contains a code vulnerability. This vulnerability stems from the BRAScheduler service having a service path that is not properly quoted, which may...

OKI Configuration Tool code-related vulnerabilities

OKI Configuration Tool is a configuration management tool developed by OKI Corporation. Version 1.6.53 of the OKI Configuration Tool contains a code vulnerability. This vulnerability stems from an unquoted service path within the OKI Local Port Manager service, which may allow local attackers to...

CVE-2021-47878: Unquoted Search Path or Element

eBeam Education Suite 2.5.0.9 contains an unquoted service path vulnerability in the eBeam Device Service that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious code that would execute...

CVE-2021-47862: Unquoted Search Path or Element

Hi-Rez Studios 5.1.6.3 contains an unquoted service path vulnerability in the HiPatchService that allows local attackers to execute code with elevated privileges. Attackers can exploit the unquoted path during system startup or reboot to inject and run malicious executables with LocalSystem...

Realtek Wireless LAN Utility code-related vulnerabilities

The Realtek Wireless LAN Utility is a wireless network card configuration and management tool developed by Realtek Semiconductor. Version 700.1631 of the Realtek Wireless LAN Utility contains a code vulnerability caused by an unquoted service path. This vulnerability may allow local users to...

Honeywell WIN-PACK PRO code issue vulnerability

Honeywell WIN-PACK PRO is a security management platform software developed by the American company Honeywell. Version 4.8 of Honeywell WIN-PACK PRO contains a code vulnerability. This vulnerability stems from the ScheduleService component, which uses service paths without quotes, potentially...