CVE-2023-38351: Improper Certificate Validation

MiniTool Partition Wizard 12.8 contains an insecure installation mechanism that allows attackers to achieve remote code execution through a man in the middle attack...

CVE-2023-38352: Improper Certificate Validation

MiniTool Partition Wizard 12.8 contains an insecure update mechanism that allows attackers to achieve remote code execution through a man in the middle attack...

CVE-2023-38352

MiniTool Partition Wizard 12.8 contains an insecure update mechanism that allows attackers to achieve remote code execution through a man in the middle attack...

PT-2023-26378 · Minitool · Minitool Partition Wizard

Name of the Vulnerable Software and Affected Versions: MiniTool Partition Wizard version 12.8 Description: The issue is related to an insecure installation mechanism in MiniTool Partition Wizard, which allows attackers to achieve remote code execution through a man-in-the-middle attack...

CVE-2023-38352

CVE-2023-38352 affects MiniTool Partition Wizard 12.8. The issue is an insecure update mechanism that allows remote code execution via a man-in-the-middle attack. Root cause is lack of proper update integrity/authentication during updates, enabling an attacker on the network to tamper update deli...

PT-2023-26379 · Minitool · Minitool Partition Wizard

Name of the Vulnerable Software and Affected Versions: MiniTool Partition Wizard version 12.8 Description: The issue is related to an insecure update mechanism in MiniTool Partition Wizard, which can be exploited by attackers to achieve remote code execution through a man-in-the-middle attack...

编号撤回

MiniTool Partition Wizard ShadowMaker is a partition wizard tool from MiniTool. This CVE number has been withdrawn...

PT-2023-25464

Name of the Vulnerable Software and Affected Versions MiniTool Partition Wizard ShadowMaker version 12.7 Description An issue in MiniTool Partition Wizard ShadowMaker allows an attacker to execute arbitrary code via the MTAgentService component. Recommendations For version 12.7, at the moment,...

MiniTool Partition Wizard ShadowMaker 12.7 Unquoted Service Path

Exploit Title: MiniTool Partition Wizard ShadowMaker v.12.7 - Unquoted Service Path Date: 06/07/2023 Exploit Author: Idan Malihi Vendor Homepage: https://www.minitool.com/ Software Link: https://www.minitool.com/download-center/ Version: 12.7 Tested on: Microsoft Windows 10 Pro CVE : CVE-2023-361...

MiniTool Partition Wizard ShadowMaker v.12.7 - Unquoted Service Path (MTAgentService) Vulnerability

Exploit Title: MiniTool Partition Wizard ShadowMaker v.12.7 - Unquoted Service Path Exploit Author: Idan Malihi Vendor Homepage: https://www.minitool.com/ Software Link: https://www.minitool.com/download-center/ Version: 12.7 Tested on: Microsoft Windows 10 Pro CVE : CVE-2023-36164 PoC C:\Userswm...

编号撤回

MiniTool Partition Wizard ShadowMaker is a partition wizard tool from MiniTool. This CVE number has been withdrawn...

MiniTool Partition Wizard ShadowMaker v.12.7 - Unquoted Service Path _MTAgentService_

Exploit Title: MiniTool Partition Wizard ShadowMaker v.12.7 - Unquoted Service Path Date: 06/07/2023 Exploit Author: Idan Malihi Vendor Homepage: https://www.minitool.com/ Software Link: https://www.minitool.com/download-center/ Version: 12.7 Tested on: Microsoft Windows 10 Pro CVE : CVE-2023-361...

MiniTool Partition Wizard ShadowMaker v.12.7 - Unquoted Service Path _MTSchedulerService_

Exploit Title: MiniTool Partition Wizard ShadowMaker v.12.7 - Unquoted Service Path Date: 06/07/2023 Exploit Author: Idan Malihi Vendor Homepage: https://www.minitool.com/ Software Link: https://www.minitool.com/download-center/ Version: 12.7 Tested on: Microsoft Windows 10 Pro CVE : CVE-2023-361...

CVE-2022-29320

MiniTool Partition Wizard v12.0 contains an unquoted service path which allows attackers to escalate privileges to the system level...

CVE-2022-29320

MiniTool Partition Wizard v12.0 contains an unquoted service path which allows attackers to escalate privileges to the system level...

CVE-2022-29320

CVE-2022-29320 affects MiniTool Partition Wizard v12.0 and is caused by an unquoted service path, enabling local privilege escalation to SYSTEM. The provided documents consistently describe the issue as an elevation of privilege stemming from the unquoted service path; no explicit affected additi...

CVE-2022-29320

MiniTool Partition Wizard v12.0 contains an unquoted service path which allows attackers to escalate privileges to the system level...

PT-2022-19537

Name of the Vulnerable Software and Affected Versions MiniTool Partition Wizard version 12.0 Description The issue allows attackers to escalate privileges to the system level due to an unquoted service path in MiniTool Partition Wizard. Recommendations For MiniTool Partition Wizard version 12.0,...

MiniTool Partition Wizard 代码问题漏洞

MiniTool Partition Wizard is a partition manager for home and home office users from MiniTool Canada. v12.0 of MiniTool Partition Wizard contains an elevation of privilege vulnerability that stems from the application containing an unreferenced service path. An attacker could exploit this...

CVE-2022-29320: Unquoted Search Path or Element

MiniTool Partition Wizard v12.0 contains an unquoted service path which allows attackers to escalate privileges to the system level...