EUVD-2025-26882

Malicious code in bioql PyPI...

CVE-2025-54081

CVE-2025-54081 affects Sunshine (Moonlight host) due to an unquoted executable path in the Windows service SunshineService prior to 2025.923.33222. If Sunshine is installed in a directory with spaces, the Service Control Manager may misinterpret the path and allow a malicious binary to execute ea...

CVE-2025-54081 SunshineService Has Unquoted Service Path That Allows Local SYSTEM Code Execution

Sunshine is a self-hosted game stream host for Moonlight. Prior to version 2025.923.33222, the Windows service SunshineService is installed with an unquoted executable path. If Sunshine is installed in a directory whose name includes a space, the Service Control Manager SCM interprets the path...

CVE-2025-54081 SunshineService Has Unquoted Service Path That Allows Local SYSTEM Code Execution

Sunshine is a self-hosted game stream host for Moonlight. Prior to version 2025.923.33222, the Windows service SunshineService is installed with an unquoted executable path. If Sunshine is installed in a directory whose name includes a space, the Service Control Manager SCM interprets the path...

PT-2025-39202

Name of the Vulnerable Software and Affected Versions Sunshine versions prior to 2025.923.33222 Description Sunshine, a self-hosted game stream host for Moonlight, is affected by an issue where the Windows service SunshineService is installed with an unquoted executable path. If Sunshine is...

Sunshine 安全漏洞

Sunshine is an open source self-service game streaming host for Moonlight by LizardByte. A security vulnerability exists in versions prior to Sunshine 2025.923.33222, which stems from the Windows service SunshineService being installed without wrapping the executable path in quotes, which could...

OMRON SOCIAL SOLUTIONS Uninterruptible Power Supply (UPS) management application registers a Windows service with an unquoted file path

Overview Uninterruptible Power Supply UPS management application provided by OMRON SOCIAL SOLUTIONS Co., Ltd. registers a Windows service with an unquoted file path CWE-428, CVE-2025-9818. OMRON SOCIAL SOLUTIONS Co., Ltd. reported this vulnerability to JPCERT/CC to notify users of its solution...

CVE-2025-59307

RAID Manager provided by Century Corporation registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege...

CVE-2025-9818

A vulnerability CWE-428 has been identified in the Uninterruptible Power Supply UPS management application provided by OMRON SOCIAL SOLUTIONS Co., Ltd., where the executable file paths of Windows services are not enclosed in quotation marks. If the installation folder path of this product contain...

Century HW RAID Manager registers a Windows service with an unquoted file path

Overview RAID Manager provided by Century Corporation contains the following vulnerability. Unquoted search path or element CWE-428 - CVE-2025-59307 Kazuma Matsumoto of GMO Cybersecurity by IERAE, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...

CVE-2025-59307

RAID Manager provided by Century Corporation registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege...

CVE-2025-59307

RAID Manager provided by Century Corporation registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege...

CVE-2025-59307

CVE-2025-59307 concerns Century Corporation’s RAID Manager. It is caused by an unquoted Windows service path, allowing a user with write access to the system drive root to execute arbitrary code with SYSTEM privileges. Affected product: RAID Manager. Root cause (CWE-428): unquoted service path. I...

CVE-2025-9818 Vulnerability caused by unquoted file paths of Windows services registered by the Uninterruptible Power Supply (UPS) management application

A vulnerability CWE-428 has been identified in the Uninterruptible Power Supply UPS management application provided by OMRON SOCIAL SOLUTIONS Co., Ltd., where the executable file paths of Windows services are not enclosed in quotation marks. If the installation folder path of this product contain...

CVE-2025-9818

CVE-2025-9818 describes a CWE-428 issue in the UPS management application from OMRON SOCIAL SOLUTIONS Co., Ltd. where Windows service executable paths are not quoted, enabling potential unauthorized file execution with service privileges if the install path contains spaces. Supported by multiple ...

PT-2025-38113

Name of the Vulnerable Software and Affected Versions: RAID Manager versions affected versions not specified Description: RAID Manager, provided by Century Corporation, registers a Windows service with an unquoted file path. A user with write permission on the root directory of the system drive m...

OMRON Uninterruptible Power Supply management application 安全漏洞

OMRON Uninterruptible Power Supply management application is a software for monitoring and configuring uninterruptible power supply devices from OMRON Japan. A security vulnerability exists in the OMRON Uninterruptible Power Supply management application that originates from a Windows service...

CVE-2025-58400

RATOC RAID Monitoring Manager for Windows provided by RATOC Systems, Inc. registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege...

RATOC RAID Monitoring Manager for Windows registers a Windows service with an unquoted file path

Overview RATOC RAID Monitoring Manager for Windows provided by RATOC Systems, Inc. contains the following vulnerability. Unquoted search path or element CWE-428 - CVE-2025-58400 Kazuma Matsumoto of GMO Cybersecurity by IERAE, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the...

CVE-2025-58400

RATOC RAID Monitoring Manager for Windows provided by RATOC Systems, Inc. registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege...