36 matches found
CVE-2024-27462
CVE-2024-27462 Wondershare MobileTrans 4.5.6 - 引用符なしサービスパス 説明: Wondershare Filmora バージョン 4.5.6 以下には、複数の引用符なしサービスパスが含まれており、攻撃者が権限をシステムレベルに昇格させることを可能にします。 影響を受けるサービス WsAppService3 サービスのバイナリパス C:\Program Files x86\Wondershare\WAF3\3.0.0.308\WsAppService3.exe ElevationService サービスのバイナリパス C:\Program...
CVE-2022-50903
Wondershare MobileTrans 3.5.9 contains an unquoted service path vulnerability in the ElevationService that allows local users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted path by placing malicious executables in specific filesystem locations that...
CVE-2022-50903
Wondershare MobileTrans 3.5.9 contains an unquoted service path vulnerability in the ElevationService that allows local users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted path by placing malicious executables in specific filesystem locations that...
CVE-2022-50903 Wondershare MobileTrans 3.5.9 - 'ElevationService' Unquoted Service Path
Wondershare MobileTrans 3.5.9 contains an unquoted service path vulnerability in the ElevationService that allows local users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted path by placing malicious executables in specific filesystem locations that...
CVE-2022-50903 Wondershare MobileTrans 3.5.9 - 'ElevationService' Unquoted Service Path
Wondershare MobileTrans 3.5.9 contains an unquoted service path vulnerability in the ElevationService that allows local users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted path by placing malicious executables in specific filesystem locations that...
Wondershare MobileTrans 代码问题漏洞
Wondershare MobileTrans is a cell phone data transfer software from China Wanxing Technology Wondershare. A code issue vulnerability exists in Wondershare MobileTrans version 3.5.9, which stems from an unquoted path to the ElevationService service, and could lead to code execution and elevation o...
PT-2026-2379
Name of the Vulnerable Software and Affected Versions Wondershare MobileTrans version 3.5.9 Description The software contains an unquoted service path vulnerability within the ElevationService. This allows local users to potentially execute code with elevated system privileges. Exploitation...
CVE-2022-50903: Unquoted Search Path or Element
Wondershare MobileTrans 3.5.9 contains an unquoted service path vulnerability in the ElevationService that allows local users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted path by placing malicious executables in specific filesystem locations that...
CVE-2023-31748
Insecure permissions in MobileTrans v4.0.11 allows attackers to escalate privileges to local admin via replacing the executable file...
EUVD-2023-36039
Malicious code in bioql PyPI...
EUVD-2023-31499
Malicious code in bioql PyPI...
CVE-2023-27763
An issue found in Wondershare Technology Co.,Ltd MobileTrans v.4.0.2 allows a remote attacker to execute arbitrary commands via the mobiletranssetupfull5793.exe file...
PT-2024-21913 · Wondershare · Wondershare Filmora +1
Name of the Vulnerable Software and Affected Versions: Wondershare MobileTrans version 4.5.6 and lower Wondershare Filmora versions 4.5.6 and lower Description: The issue allows attackers to escalate privileges due to multiple unquoted service paths. Recommendations: For Wondershare MobileTrans...
CVE-2023-31748
Insecure permissions in MobileTrans v4.0.11 allows attackers to escalate privileges to local admin via replacing the executable file...
CVE-2023-31748
Insecure permissions in MobileTrans v4.0.11 allows attackers to escalate privileges to local admin via replacing the executable file...
Design/Logic Flaw
Insecure permissions in MobileTrans v4.0.11 allows attackers to escalate privileges to local admin via replacing the executable file...
PT-2023-23446 · Wondershare · Mobiletrans
Name of the Vulnerable Software and Affected Versions: MobileTrans version 4.0.11 Description: The issue is related to insecure permissions, allowing attackers to escalate privileges to local admin. This can be achieved by replacing the executable file, potentially leading to unauthorized access...
CVE-2023-31748: Incorrect Permission Assignment for Critical Resource
Insecure permissions in MobileTrans v4.0.11 allows attackers to escalate privileges to local admin via replacing the executable file...
CVE-2023-31748
CVE-2023-31748 affects MobileTrans 4.0.11. The issue is a weak/ insecure service permissions flaw enabling a local user to escalate to SYSTEM by manipulating the ElevationService, effectively replacing the executable to gain local admin privileges. Publicly noted exploit details exist (e.g., Expl...