CVE-2025-45095

Lavasoft Web Companion also known as Ad-Aware WebCompanion versions 8.9.0.1091 through 12.1.3.1037 installs the DCIService.exe service with an unquoted service path vulnerability. An attacker with write access to the file system could potentially execute arbitrary code with elevated privileges by...

EUVD-2025-33344

Lavasoft Web Companion also known as Ad-Aware WebCompanion versions 8.9.0.1091 through 12.1.3.1037 installs the DCIService.exe service with an unquoted service path vulnerability. An attacker with write access to the file system could potentially execute arbitrary code with elevated privileges by...

CVE-2025-45095

Lavasoft Web Companion also known as Ad-Aware WebCompanion versions 8.9.0.1091 through 12.1.3.1037 installs the DCIService.exe service with an unquoted service path vulnerability. An attacker with write access to the file system could potentially execute arbitrary code with elevated privileges by...

CVE-2025-45095

Lavasoft Web Companion also known as Ad-Aware WebCompanion versions 8.9.0.1091 through 12.1.3.1037 installs the DCIService.exe service with an unquoted service path vulnerability. An attacker with write access to the file system could potentially execute arbitrary code with elevated privileges by...

Lavasoft Web Companion 安全漏洞

Lavasoft Web Companion is an antivirus program from Lavasoft Canada. A security vulnerability exists in Lavasoft Web Companion versions 8.9.0.1091 through 12.1.3.1037, which stems from an unquoted service path vulnerability in the DCIService.exe service that could lead to the execution of arbitra...

PT-2025-41386

Name of the Vulnerable Software and Affected Versions Lavasoft Web Companion versions 8.9.0.1091 through 12.1.3.1037 Description Lavasoft Web Companion also known as Ad-Aware WebCompanion installs the DCIService.exe service with an unquoted service path. An attacker with write access to the file...

CVE-2025-45095

Lavasoft Web Companion also known as Ad-Aware WebCompanion versions 8.9.0.1091 through 12.1.3.1037 installs the DCIService.exe service with an unquoted service path vulnerability. An attacker with write access to the file system could potentially execute arbitrary code with elevated privileges by...

CVE-2025-45095

CVE-2025-45095 affects Lavasoft Web Companion (Ad-Aware WebCompanion) versions 8.9.0.1091 through 12.1.3.1037. The root cause is an unquoted service path in the DCIService.exe service, which could allow an attacker with filesystem write access to place a malicious executable and execute arbitrary...

EUVD-2012-4927

Malware in sbrugna...

EUVD-2023-57836

Malicious code in bioql PyPI...

OPENSUSE-SU-2024:11446-1 texlive-latex-web-companion-2021.187.svn29349-47.2 on GA media

These are all security issues fixed in the texlive-latex-web-companion-2021.187.svn29349-47.2 package on the GA media of openSUSE Tumbleweed...

CVE-2023-5524

Insufficient blacklisting in M-Files Web Companion before release version 23.10 and LTS Service Release Versions before 23.8 LTS SR1 allows Remote Code Execution via specific file types...

CVE-2023-5523

Execution of downloaded content flaw in M-Files Web Companion before release version 23.10 and LTS Service Release Versions before 23.8 LTS SR1 allows Remote Code Execution...

CVE-2023-5523

Execution of downloaded content flaw in M-Files Web Companion before release version 23.10 and LTS Service Release Versions before 23.8 LTS SR1 allows Remote Code Execution...

CVE-2023-5524

Insufficient blacklisting in M-Files Web Companion before release version 23.10 and LTS Service Release Versions before 23.8 LTS SR1 allows Remote Code Execution via specific file types...

CVE-2023-5523

Execution of downloaded content flaw in M-Files Web Companion before release version 23.10 and LTS Service Release Versions before 23.8 LTS SR1 allows Remote Code Execution...

Remote code execution

Execution of downloaded content flaw in M-Files Web Companion before release version 23.10 and LTS Service Release Versions before 23.8 LTS SR1 allows Remote Code Execution...

Remote code execution

Insufficient blacklisting in M-Files Web Companion before release version 23.10 and LTS Service Release Versions before 23.8 LTS SR1 allows Remote Code Execution via specific file types...

CVE-2023-5524

CVE-2023-5524 refers to an inadequate file-type blacklist in M-Files Web Companion that enables Remote Code Execution . Technical details across sources indicate the vulnerability affects versions prior to 23.10 for the standard Web Companion and prior to 23.8 LTS SR1 for the LTS service release....

CVE-2023-5524 M-Files Web Companion allows Remote Code Execution for some filetypes

Insufficient blacklisting in M-Files Web Companion before release version 23.10 and LTS Service Release Versions before 23.8 LTS SR1 allows Remote Code Execution via specific file types...