CVE-2022-39959

CVE-2022-39959 受影响供应商 - Panini https://www.panini.com/en 受影响产品 - Panini Everest Engine 受影响版本 - 2.0.4 Everest Engine（EverestEngine.exe）在 Windows 上的 2.0.4 版本中存在未加引号的服务路径（Unquoted Service Path）漏洞。这允许未经授权的本地用户将任意代码插入到未加引号的服务路径中，并将权限提升至系统（SYSTEM）权限。 文件路径： C:\ProgramData\Panini\Everest Engine 漏洞利用 将名为...

EUVD-2022-42403

Malicious code in bioql PyPI...

CVE-2022-39959

Panini Everest Engine 2.0.4 allows unprivileged users to create a file named Everest.exe in the %PROGRAMDATA%\Panini folder. This leads to privilege escalation because a service, running as SYSTEM, uses the unquoted path of %PROGRAMDATA%\Panini\Everest Engine\EverestEngine.exe and therefore a...

CVE-2022-39959

Panini Everest Engine 2.0.4 allows unprivileged users to create a file named Everest.exe in the %PROGRAMDATA%\Panini folder. This leads to privilege escalation because a service, running as SYSTEM, uses the unquoted path of %PROGRAMDATA%\Panini\Everest Engine\EverestEngine.exe and therefore a...

CVE-2022-39959

CVE-2022-39959 – Panini Everest Engine 2.0.4 : A privilege-escalation flaw arising from an unprivileged user being able to create a file named Everest.exe in %PROGRAMDATA%\Panini. The service running as SYSTEM uses the unquoted path %PROGRAMDATA%\Panini\Everest Engine\EverestEngine.exe, which can...

CVE-2022-39959

Panini Everest Engine 2.0.4 allows unprivileged users to create a file named Everest.exe in the %PROGRAMDATA%\Panini folder. This leads to privilege escalation because a service, running as SYSTEM, uses the unquoted path of %PROGRAMDATA%\Panini\Everest Engine\EverestEngine.exe and therefore a...

PT-2022-25146 · Panini · Panini Everest Engine

Name of the Vulnerable Software and Affected Versions: Panini Everest Engine version 2.0.4 Description: The issue allows unprivileged users to create a file named Everest.exe in the %PROGRAMDATA%Panini folder, leading to privilege escalation. A service running as SYSTEM uses the unquoted path of...

Panini Everest Engine 代码问题漏洞

Panini Everest Engine is a Windows service driver from Panini Corporation. A security vulnerability exists in Panini Everest Engine version 2.0.4 that originates from allowing an unprivileged user to create a file named Everest.exe in the %PROGRAMDATA%Panini folder, which can be exploited by an...