CVE-2022-50914

EaseUS Data Recovery 15.1.0.0 contains an unquoted service path vulnerability in the EaseUS UPDATE SERVICE executable. Attackers can exploit the unquoted path to inject and execute malicious code with elevated LocalSystem privileges...

CVE-2022-50914 EaseUS Data Recovery - 'ensserver.exe' Unquoted Service Path

EaseUS Data Recovery 15.1.0.0 contains an unquoted service path vulnerability in the EaseUS UPDATE SERVICE executable. Attackers can exploit the unquoted path to inject and execute malicious code with elevated LocalSystem privileges...

CVE-2022-50914 EaseUS Data Recovery - 'ensserver.exe' Unquoted Service Path

EaseUS Data Recovery 15.1.0.0 contains an unquoted service path vulnerability in the EaseUS UPDATE SERVICE executable. Attackers can exploit the unquoted path to inject and execute malicious code with elevated LocalSystem privileges...

CVE-2022-50914

CVE-2022-50914 affects EaseUS Data Recovery 15.1.0.0 with an unquoted path in the EaseUS UPDATE SERVICE executable, enabling local privilege escalation to LocalSystem. The connected documents confirm the issue and impact, but do not provide a patch/version fix or explicit exploitation details.

CVE-2026-20856

Improper input validation in Windows Server Update Service allows an unauthorized attacker to execute code over a network...

CVE-2026-20856

Improper input validation in Windows Server Update Service allows an unauthorized attacker to execute code over a network...

CVE-2026-20856 Windows Server Update Service (WSUS) Remote Code Execution Vulnerability

...

CVE-2026-20856

Improper input validation in Windows Server Update Service allows an unauthorized attacker to execute code over a network...

Windows Server Update Service (WSUS) Remote Code Execution Vulnerability

Improper input validation in Windows Server Update Service allows an unauthorized attacker to execute code over a network...

PT-2026-2390

Name of the Vulnerable Software and Affected Versions EaseUS Data Recovery version 15.1.0.0 Description EaseUS Data Recovery 15.1.0.0 has an issue with an unquoted service path in the EaseUS UPDATE SERVICE executable. This allows attackers to inject and execute malicious code with elevated...

CVE-2026-20856: Improper Input Validation

Improper input validation in Windows Server Update Service allows an unauthorized attacker to execute code over a network...

EaseUS Data Recovery 代码问题漏洞

EaseUS Data Recovery is a data recovery software from EaseUS. A code issue vulnerability exists in EaseUS Data Recovery version 15.1.0.0, which stems from the unquoted path to the EaseUS UPDATE SERVICE executable service, which could lead to an attacker injecting and executing malicious code and...

CVE-2022-50914: Unquoted Search Path or Element

EaseUS Data Recovery 15.1.0.0 contains an unquoted service path vulnerability in the EaseUS UPDATE SERVICE executable. Attackers can exploit the unquoted path to inject and execute malicious code with elevated LocalSystem privileges...

The vulnerability of the Firmware Update Service software in D-Link DCS-850L video surveillance cameras allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Firmware Update Service in D-Link DCS-850L video surveillance cameras is related to an incorrect limit on the path to the restricted directory during the processing of the DownloadFile parameter. Exploiting this vulnerability can allow an attacker to gain unauthorized...

KLA90840 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, bypass security restrictions, obtain sensitive information, cause denial of service, spoof user interface. Below is a complete list of...

Moderate: Red Hat Security Advisory: osbuild-composer security update

An update for osbuild-composer is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2025-15245

A vulnerability was found in D-Link DCS-850L 1.02.09. Affected is the function uploadfirmware of the component Firmware Update Service. The manipulation of the argument DownloadFile results in path traversal. The attack must originate from the local network. The exploit has been made public and...

CVE-2025-15245 D-Link DCS-850L Firmware Update Service uploadfirmware path traversal

A vulnerability was found in D-Link DCS-850L 1.02.09. Affected is the function uploadfirmware of the component Firmware Update Service. The manipulation of the argument DownloadFile results in path traversal. The attack must originate from the local network. The exploit has been made public and...

CVE-2025-15245 D-Link DCS-850L Firmware Update Service uploadfirmware path traversal

A vulnerability was found in D-Link DCS-850L 1.02.09. Affected is the function uploadfirmware of the component Firmware Update Service. The manipulation of the argument DownloadFile results in path traversal. The attack must originate from the local network. The exploit has been made public and...

CVE-2025-15245

CVE-2025-15245 concerns D-Link DCS-850L firmware, version 1.02.09, in the Firmware Update Service’s uploadfirmware function. The issue is a path traversal caused by manipulating the DownloadFile argument. Exploitation requires local-network access, and public exploit code exists. The vulnerabilit...