CVE-2022-45988

CVE-2022-45988 StarSoftComm HP CooCare An elevation of privilege vulnerability exists I have contacted with hp-security-alert They have fixed this bug. About StarSoftComm CooCare HP-PSRT-IR 4106 The vendor responded with the following information: Follow these steps to update: 1. Launch eService ...

CVE-2023-36169

CVE-2023-36169 SlySoft Game Jackal Pro v.5.2.0.0 中存在一个问题，允许攻击者通过 server.exe 组件执行任意代码 漏洞利用标题：Game Jackal Server v5 - 未引用的服务路径 日期：05/08/2023 漏洞利用作者：Idan Malihi 厂商主页：https://www.allradiosoft.ru 软件链接：https://www.allradiosoft.ru/en/ss/index.htm 版本：5 测试环境：Microsoft Windows 10 Pro CVE：CVE-2023-36169 PoC...

CVE-2022-35899

CVE-2022-35899 Unquoted Service Path Asus GameSdk Exploit Title: Asus GameSDK v1.0.0.4 - 'GameSDK.exe' Unquoted Service Path Privilege Escalation Date: 07/14/2022 Exploit Author: Angelo Pio Amirante Version: 1.0.0.4 Tested on: Windows 10 Patched version: 1.0.5.0 Step to discover the unquoted...

CVE-2023-36165

CVE-2023-36165 MiniTool Partition Wizard ShadowMaker v.12.7 中存在一个问题，允许攻击者通过 SchedulerService.exe 组件执行任意代码并提升权限。 漏洞利用标题：MiniTool Partition Wizard ShadowMaker v.12.7 - 未引用的服务路径 日期：2023年8月5日 漏洞利用作者：Idan Malihi 厂商主页：https://www.minitool.com/ 软件链接：https://www.minitool.com/download-center/ 版本：12.7...

CVE-2024-23774

CVE-2024-23774 - 未加引号的Windows服务路径漏洞 信息将在适当时候提供。...

CVE-2023-36164

CVE-2023-36164 An issue in MiniTool Partition Wizard ShadowMaker v.12.7 allows an attacker to execute arbitrary code via the MTAgentService component Exploit Title: MiniTool Partition Wizard ShadowMaker v.12.7 - Unquoted Service Path Date: 05/08/2023 Exploit Author: Idan Malihi Vendor Homepage:...

CVE-2017-1000475

CVE-2017-1000475: Freesshd Unquoted Service Path Prove of concept Windows 10 with freeSSHd 1.3.1, installed by default and with the option running as a system service. Command to check Unquoted Service Path. The service is unquoted by default. The process is running as SYSTEM by default. Create a...

CVE-2023-36168

CVE-2023-36168 An issue in AVG AVG Anti-Spyware v.7.5 allows an attacker to execute arbitrary code via a crafted script to the guard.exe component Exploit Title: AVG Anti Spyware 7.5 - Unquoted Service Path Date: 05/08/2023 Exploit Author: Idan Malihi Vendor Homepage: https://www.avg.com Software...

CVE-2023-37800

Fortect 5.0.0.7 中的未引用服务路径漏洞 - CVE-2023-37800 Fortect 5.0.0.7 中的未引用服务路径漏洞 发现者: Idan Malihi 描述 组件 MainService.exe 存在未引用服务路径漏洞: C:\Program Files\Fortect\MainService.exe 复现步骤 要利用未引用服务路径漏洞，攻击者应执行以下步骤： 1. 打开 CMD 提示符并输入以下命令： wmic service get name, displayname, pathname, startmode |findstr /i "auto"...

CVE-2022-23909

CVE-2022-23909 描述： 在 Windows 上，Sherpa Connector Service 版本 2020.2.20328.2050 存在未加引号的服务路径漏洞，允许本地经过身份验证且具有管理权限的用户以 LocalSystem 权限运行恶意可执行文件。如果系统配置不当，低权限用户能够写入 “Sherpa Software” 或 “Sherpa Connector” 目录，则可能利用该漏洞将其权限提升至 LocalSystem。 发现未加引号服务路径的步骤： C:wmic service get name,displayname,pathname,startmode ...

CVE-2024-27673

CVE-2024-27673 ASUS Control Center Express = 01.06.15 - Unquoted Service Path Description: ASUS Control Center Express Version = 01.06.15 contains an unquoted service path which allows attackers to escalate privileges to the system level. Assuming attackers have write access to C:, the attackers...

CVE-2024-27462

CVE-2024-27462 Wondershare MobileTrans 4.5.6 - Unquoted Service Path Description: Wondershare Filmora versions 4.5.6 and lower contain multiple unquoted service path which allow attackers to escalate privileges to the system level. Impacted services WsAppService3 service binary Path C:\Program...

CVE-2019-17658

Exploit de ruta de servicio sin comillas en FortiClient CVE-2019-17658 FortiClient para Windows anterior a la versión 6.2.3 es vulnerable a una vulnerabilidad de ruta de servicio sin comillas. Esto puede permitir a un atacante obtener privilegios elevados a través de la ruta del servicio ejecutab...

CVE-2022-39959

CVE-2022-39959 受影响供应商 - Panini https://www.panini.com/en 受影响产品 - Panini Everest Engine 受影响版本 - 2.0.4 Everest Engine（EverestEngine.exe）在 Windows 上的 2.0.4 版本中存在未加引号的服务路径（Unquoted Service Path）漏洞。这允许未经授权的本地用户将任意代码插入到未加引号的服务路径中，并将权限提升至系统（SYSTEM）权限。 文件路径： C:\ProgramData\Panini\Everest Engine 漏洞利用 将名为...

CVE-2025-14018

CVE-2025-14018: NetBT e-Fatura Privilege Escalation Vulnerability 📋 General Information Parameter| Value ---|--- CVE ID| CVE-2025-14018 Vulnerability Type| Local Privilege Escalation Unquoted Service Path CWE| CWE-428 Affected Product| NetBT e-Fatura Vulnerable Versions| 1.2.15 Exploit Author|...

CVE-2023-31747

root@kitploit: Exploit Title: Wondershare Filmora 12.2.9.2233 - Unquoted Service Path CVE-2023-31747 Date: 2023/04/23 Exploit Author: msd0pe Vendor Homepage: https://www.wondershare.com My Github: https://github.com/msd0pe-1 Wondershare Filmora: Versions = wmic service get...

ProtonVPN v4.4.1 - Unquoted Service Path

Exploit Title: ProtonVPN v4.4.1 - Unquoted Service Path Date: 2026-06-22 Exploit Author: Milad Karimi Contact: [email protected] Zone-H: www.zone-h.org/archive/notifier=Ex3ptionaL Vendor Homepage: https://protonvpn.com/ Software Link: https://protonvpn.com/ Version: 4.4.1 Tested on: Windo...

PT-2026-55517

Name of the Vulnerable Software and Affected Versions Zakra versions prior to 4.2.1 Description The Zakra theme for WordPress contains a Stored Cross-Site Scripting issue. This occurs because the theme registers three post meta fields—zakra menu item color, zakra menu item hover color, and zakra...

CVE-2020-37252

Realtek Audio Service 1.0.0.55 contains an unquoted service path vulnerability in RtkAudioService64.exe that allows local attackers to escalate privileges by injecting malicious code. Attackers can place executable files in the unquoted service path directory to execute arbitrary code with...

CVE-2022-50971

Malwarebytes 4.5 contains an unquoted service path vulnerability in the MBAMService executable that allows local attackers to escalate privileges by injecting malicious code into the system root path. Attackers can place executable files in unquoted path directories that execute with LocalSystem...