CVE-2022-35899

CVE-2022-35899 affects ASUSTeK Aura Ready Game SDK service (GameSDK.exe) v1.0.0.4 with an unquoted service path, enabling local privilege escalation via overwriting the binary in Program Files (x86). Public exploits/documentation exist (e.g., Exploit-DB entry) and patch v1.0.5.0 is available; rem...

Kite 1.2021.610.0 Unquoted Service Path

Exploit Title: Kite 1.2021.610.0 - Unquoted Service Path Date: 2020-11-6 Exploit Author: Ghaleb Al-otaibi Vendor Homepage: https://www.kite.com/ Version: Version 4.2.0.1 U1 Tested on: Microsoft Windows 10 Pro - 10.0.19044 N/A Build 19044 CVE : NA Service info: C:\Windows\system32\cmd.exesc qc...

Dr. Fone 4.0.8 Unquoted Service Path

Exploit Title: Dr. Fone v4.0.8- 'netupdater32.exe' Unquoted Service Path Discovery Date: 2022-05-07 Discovery by: Esant1490 Vendor Homepage: https://drfone.wondershare.net Software Link : https://download.wondershare.net/drfonefull4008.exe Tested Version: 4.0.8 Tested on OS: Windows 10 Pro x64 en...

Kite 1.2021.610.0 - Unquoted Service Path Vulnerability

Exploit Title: Kite 1.2021.610.0 - Unquoted Service Path Exploit Author: Ghaleb Al-otaibi Vendor Homepage: https://www.kite.com/ Version: Version 4.2.0.1 U1 Tested on: Microsoft Windows 10 Pro - 10.0.19044 N/A Build 19044 CVE : NA Service info: C:\Windows\system32\cmd.exesc qc KiteService SC...

Dr. Fone 4.0.8 - (net_updater32.exe) Unquoted Service Path Vulnerability

Exploit Title: Dr. Fone v4.0.8- 'netupdater32.exe' Unquoted Service Path Discovery by: Esant1490 Vendor Homepage: https://drfone.wondershare.net Software Link : https://download.wondershare.net/drfonefull4008.exe Tested Version: 4.0.8 Tested on OS: Windows 10 Pro x64 en Vulnerability Type: Unquot...

Kite 1.2021.610.0 - Unquoted Service Path

Exploit Title: Kite 1.2021.610.0 - Unquoted Service Path Date: 2020-11-6 Exploit Author: Ghaleb Al-otaibi Vendor Homepage: https://www.kite.com/ Version: Version 4.2.0.1 U1 Tested on: Microsoft Windows 10 Pro - 10.0.19044 N/A Build 19044 CVE : NA Service info: C:\Windows\system32\cmd.exesc qc...

Dr. Fone 4.0.8 - 'net_updater32.exe' Unquoted Service Path

Exploit Title: Dr. Fone v4.0.8- 'netupdater32.exe' Unquoted Service Path Discovery Date: 2022-05-07 Discovery by: Esant1490 Vendor Homepage: https://drfone.wondershare.net Software Link : https://download.wondershare.net/drfonefull4008.exe Tested Version: 4.0.8 Tested on OS: Windows 10 Pro x64 en...

PT-2022-23006 · Asustek · Asustek Aura Ready Game Sdk

Name of the Vulnerable Software and Affected Versions: ASUSTeK Aura Ready Game SDK service GameSDK.exe version 1.0.0.4 Description: The issue is related to an unquoted service path in the ASUSTeK Aura Ready Game SDK service. This might allow a local user to escalate privileges by creating a...

Asus GameSDK 1.0.0.4 Unquoted Service Path Vulnerability

Exploit Title: Asus GameSDK v1.0.0.4 - 'GameSDK.exe' Unquoted Service Path Privilege Escalation Exploit Author: Angelo Pio Amirante Version: 1.0.0.4 Tested on: Windows 10 Patched version: 1.0.5.0 CVE: CVE-2022-35899 Step to discover the unquoted service path: wmic service get...

ASUS GameSDK 代码问题漏洞

ASUS GameSDK is a service from Asus ASUS of Taiwan, China. It allows users to control the LEDs of Asus Aura-enabled devices, such as keyboards, mice, and motherboards. A security vulnerability exists in ASUS GameSDK version 1.0.0.4, which originates from an unreferenced service path vulnerability...

Asus GameSDK 1.0.0.4 Unquoted Service Path

Exploit Title: Asus GameSDK v1.0.0.4 - 'GameSDK.exe' Unquoted Service Path Privilege Escalation Date: 07/14/2022 Exploit Author: Angelo Pio Amirante Version: 1.0.0.4 Tested on: Windows 10 Patched version: 1.0.5.0 CVE: CVE-2022-35899 Step to discover the unquoted service path: wmic service get...

Exploit for Unquoted Search Path or Element in Asus Aura_Ready_Game_Software_Development_Kit

CVE-2022-35899 Unquoted Service Path Asus GameSdk Exploit T...

NetSarang XLPD Elevation of Privilege Vulnerability

NetSarang XLPD is a remote printing tool from NetSarang, Inc. It is used to manage an organization's print jobs. An elevation of privilege vulnerability exists in NetSarang XLPD v7.0.0094 and prior versions, which stems from an application containing an un-referenced service path. An attacker can...

CVE-2022-33035

XLPD v7.0.0094 and below contains an unquoted service path vulnerability which allows local users to launch processes with elevated privileges...

CVE-2022-33035

XLPD v7.0.0094 and below contains an unquoted service path vulnerability which allows local users to launch processes with elevated privileges...

Design/Logic Flaw

XLPD v7.0.0094 and below contains an unquoted service path vulnerability which allows local users to launch processes with elevated privileges...

CVE-2022-33035

XLPD v7.0.0094 and below contains an unquoted service path vulnerability which allows local users to launch processes with elevated privileges...

NetSarang XLPD 代码问题漏洞

NetSarang XLPD is a remote printing tool from NetSarang, Inc. It is used to manage an organization's print jobs. An elevation of privilege vulnerability exists in NetSarang XLPD v7.0.0094 and prior versions, which stems from an application containing an un-referenced service path. An attacker can...

CVE-2022-2147

Cloudflare Warp for Windows from version 2022.2.95.0 contained an unquoted service path which enables arbitrary code execution leading to privilege escalation. The fix was released in version 2022.3.186.0...

CVE-2022-2147

Cloudflare Warp for Windows from version 2022.2.95.0 contained an unquoted service path which enables arbitrary code execution leading to privilege escalation. The fix was released in version 2022.3.186.0...