CVE-2023-54331

Outline 1.6.0 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted service path in the OutlineService executable to inject malicious code that will be executed with...

CVE-2022-50920

Sandboxie-Plus 5.50.2 contains an unquoted service path vulnerability in the SbieSvc Windows service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted binary path to inject malicious executables that will be run with LocalSystem privileges durin...

CVE-2022-50933

CVE-2022-50933 affects Cain & Abel 4.9.56 via an unquoted service path that can allow a local attacker to execute arbitrary code with LocalSystem privileges. The vulnerability stems from an unquoted binary path used to launch the service, enabling local exploitation with SYSTEM rights and potenti...

CVE-2022-50920

CVE-2022-50920 concerns Sandboxie-Plus 5.50.2, where an unquoted service path in the Windows SbieSvc service allows a local attacker to potentially execute arbitrary code by injecting a binary that runs with LocalSystem privileges at service startup. The entry’s metrics show high impact (C/H/I/A)...

CVE-2022-50921 WOW21 5.0.1.9 - 'Service WOW21_Service' Unquoted Service Path

WOW21 5.0.1.9 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path to inject malicious executables that will be launched with LocalSystem permissions during...

CVE-2022-50901

Wondershare Dr.Fone 11.4.9 has an unquoted service path in the DFWSIDService located at C:\Program Files (x86)\Wondershare\Wondershare Dr.Fone, enabling local users to potentially execute arbitrary code with LocalSystem privileges. The CVE is documented with public references and an exploit in Ex...

PT-2026-2390

Name of the Vulnerable Software and Affected Versions EaseUS Data Recovery version 15.1.0.0 Description EaseUS Data Recovery 15.1.0.0 has an issue with an unquoted service path in the EaseUS UPDATE SERVICE executable. This allows attackers to inject and execute malicious code with elevated...

PT-2026-2379

Name of the Vulnerable Software and Affected Versions Wondershare MobileTrans version 3.5.9 Description The software contains an unquoted service path vulnerability within the ElevationService. This allows local users to potentially execute code with elevated system privileges. Exploitation...

PT-2026-2414

Name of the Vulnerable Software and Affected Versions CONTPAQi AdminPAQ version 14.0.0 Description The software contains an unquoted service path issue in the AppKeyLicenseServer service, which operates with LocalSystem privileges. An attacker can exploit this to inject malicious code into the...

PT-2026-2421

Name of the Vulnerable Software and Affected Versions Outline version 1.6.0 Description The software contains an unquoted service path, potentially allowing local attackers to execute arbitrary code with elevated system privileges. Exploitation involves the unquoted service path in the...

PT-2025-52839

Name of the Vulnerable Software and Affected Versions Epic Games Easy Anti-Cheat version 4.0 Description An unquoted service path exists in Epic Games Easy Anti-Cheat 4.0, potentially allowing local non-privileged users to execute arbitrary code with elevated system privileges. An attacker can...

EUVD-2025-201266

VeeVPN 1.6.1 contains an unquoted service path vulnerability in the VeePNService that allows remote attackers to execute code during startup or reboot with escalated privileges. Attackers can exploit this by providing a malicious service name, allowing them to inject commands and run as LocalSyst...

CVE-2025-66575

VeeVPN 1.6.1 is affected by an unquoted service path vulnerability in the VeePNService that allows local code execution with SYSTEM privileges during startup/reboot. Exploitation involves providing a malicious service name, enabling command injection and running as LocalSystem. This CVE is docume...

EUVD-2014-8939

Malware in sbrugna...

EUVD-2016-6200

Malware in sbrugna...

EUVD-2017-5191

Malware in sbrugna...

EUVD-2021-20773

Malware in sbrugna...

EUVD-2006-4645

Malware in sbrugna...

EUVD-2007-0436

Malware in sbrugna...

EUVD-2020-7348

Malware in sbrugna...