CVE-2019-25269

Amiti Antivirus 25.0.640 is affected by an unquoted service path vulnerability in its Windows service configurations. The underlying issue allows attackers to place executables in specific directories to gain elevated LocalSystem privileges, leading to code execution through the unquoted path. Do...

CVE-2019-25267 Wing FTP Server 6.0.7 - Unquoted Service Path

Wing FTP Server 6.0.7 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path in the service configuration to inject malicious executables that will be launche...

CVE-2019-25267

Wing FTP Server 6.0.7 is affected by an unquoted service path vulnerability that lets local attackers insert and execute malicious executables with LocalSystem privileges. The issue stems from unquoted binary paths in the service configuration, enabling privilege escalation. Impact is described a...

CVE-2019-25269

Amiti Antivirus 25.0.640 contains an unquoted service path vulnerability in its Windows service configurations. Attackers can exploit the unquoted path to inject and execute malicious code with elevated LocalSystem privileges by placing executable files in specific directory locations...

PT-2026-5807

Name of the Vulnerable Software and Affected Versions ProShow Producer version 9.0.3797 Description The software contains an unquoted service path vulnerability within the ScsiAccess service. This allows local attackers to potentially execute arbitrary code. Exploitation involves leveraging the...

PT-2026-5815

Name of the Vulnerable Software and Affected Versions Wacom WTabletService version 6.6.7-3 Description The software contains an unquoted service path issue that allows local attackers to execute malicious code with elevated privileges. An attacker can place an executable file within the service...

PT-2026-5814

Name of the Vulnerable Software and Affected Versions Adaware Web Companion version 4.8.2078.3950 Description Adaware Web Companion version 4.8.2078.3950 contains an unquoted service path vulnerability in the WCAssistantService. This allows local users to potentially execute code with elevated...

PT-2026-5811

Name of the Vulnerable Software and Affected Versions Shrew Soft VPN Client version 2.2.2 Description The Shrew Soft VPN Client contains an unquoted service path issue that allows local users to execute arbitrary code with elevated system privileges. An attacker can place malicious executables in...

PT-2026-5813

Name of the Vulnerable Software and Affected Versions GCafé version 3.0 Description GCafé 3.0 contains an unquoted service path vulnerability in the gbClientService. This allows local attackers to potentially execute arbitrary code with elevated privileges. The issue stems from an unquoted path i...

PT-2026-5803

Name of the Vulnerable Software and Affected Versions Amiti Antivirus version 25.0.640 Description Amiti Antivirus contains an unquoted service path vulnerability in its Windows service configurations. This allows attackers to inject and execute malicious code with elevated LocalSystem privileges...

PT-2026-5804

Name of the Vulnerable Software and Affected Versions NETGATE Data Backup version 3.0.620 Description The software contains an unquoted service path vulnerability in its NGDatBckpSrv Windows service configuration. This allows attackers to inject and execute malicious code with LocalSystem...

PT-2026-5809

Name of the Vulnerable Software and Affected Versions Studio 5000 Logix Designer version 30.01.00 Description Studio 5000 Logix Designer 30.01.00 has an unquoted service path issue within the FactoryTalk Activation Service. This allows local users to potentially run code with higher privileges. T...

PT-2026-5808

Name of the Vulnerable Software and Affected Versions BartVPN version 1.2.2 Description BartVPN version 1.2.2 has an unquoted service path issue in the BartVPNService. This allows local attackers to potentially run arbitrary code with higher system rights. Attackers can take advantage of the...

PT-2026-5802

Name of the Vulnerable Software and Affected Versions Wing FTP Server version 6.0.7 Description The software contains an unquoted service path issue that may allow local attackers to execute arbitrary code with elevated system privileges. Exploitation involves the unquoted binary path within the...

PT-2026-5805

Name of the Vulnerable Software and Affected Versions TexasSoft CyberPlanet version 6.4.131 Description TexasSoft CyberPlanet 6.4.131 contains a security issue due to an unquoted service path in the CCSrvProxy service. This allows local attackers to execute arbitrary code. The unquoted path is...

CVE-2019-25285: Unquoted Search Path or Element

Alps Pointing-device Controller 8.1202.1711.04 contains an unquoted service path vulnerability in the ApHidMonitorService that allows local attackers to execute code with elevated privileges. Attackers can place a malicious executable in the service path and gain system-level access when the...

PT-2026-5812

Name of the Vulnerable Software and Affected Versions Alps Pointing-device Controller version 8.1202.1711.04 Description The Alps Pointing-device Controller version 8.1202.1711.04 contains an unquoted service path vulnerability in the ApHidMonitorService. This allows local attackers to execute co...

CVE-2020-37102

Adaware Web Companion 4.9.2159 contains an unquoted service path vulnerability in the WCAssistantService that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted binary path to inject malicious executables that will be run with LocalSystem privileges...

CVE-2019-25261

AnyDesk 5.4.0 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially inject malicious executables. Attackers can exploit the unquoted binary path to place malicious files in service executable locations, potentially gaining...

CVE-2020-37100

Sync Breeze Enterprise 12.4.18 contains an unquoted service path vulnerability that allows local attackers to execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path by placing malicious executables in specific file system locations to hijack the...