10379 matches found
CVE-2022-50935: Unquoted Search Path or Element
Flame II HSPA USB Modem contains an unquoted service path vulnerability in its Windows service configuration. Attackers can exploit the unquoted path in 'C:\Program Files x86\Internet Telcel\ApplicationController.exe' to execute arbitrary code with elevated system privileges...
Microsoft Windows 资源管理错误漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. Microsoft Windows suffers from a resource management error vulnerability. An attacker could exploit this vulnerability to gain elevated privileges. The following products and editions are...
Microsoft Windows 资源管理错误漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. Microsoft Windows suffers from a resource management error vulnerability. An attacker could exploit this vulnerability to gain elevated privileges. The following products and editions are...
Microsoft Windows 资源管理错误漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. Microsoft Windows suffers from a resource management error vulnerability. An attacker could exploit this vulnerability to gain elevated privileges. The following products and versions are...
PT-2026-2389
Name of the Vulnerable Software and Affected Versions ITeC ITeCProteccioAppServer affected versions not specified Description The software contains an unquoted service path vulnerability. This allows local attackers to execute code with elevated system privileges. Attackers can place a malicious...
PT-2026-2460
Name of the Vulnerable Software and Affected Versions AOS-8 affected versions not specified Description A command injection issue exists in AOS-8 that could allow a user with elevated privileges to inject shell commands by modifying a package header. This could lead to the execution of commands...
Microsoft Windows 资源管理错误漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. Microsoft Windows suffers from a resource management error vulnerability. An attacker could exploit this vulnerability to gain elevated privileges. The following products and editions are...
Microsoft Windows Kernel 安全漏洞
Microsoft Windows Kernel is the kernel of the Windows operating system by Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Kernel. An attacker could exploit this vulnerability to gain elevated privileges. The following products and editions are affected:Windows 10...
PT-2026-2376
Name of the Vulnerable Software and Affected Versions Wondershare Dr.Fone version 12.0.18 Description Wondershare Dr.Fone version 12.0.18 contains an unquoted service path issue. This allows local users to execute arbitrary code with elevated system privileges. The misconfigured service path can ...
CVE-2022-50917: Unquoted Search Path or Element
ProtonVPN 1.26.0 contains an unquoted service path vulnerability in its WireGuard service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path by placing malicious executables in specific file system locations to gain elevated...
Private Internet Access 代码问题漏洞
Private Internet Access PIA is a VPN software from Private Internet Access, Inc. A code issue vulnerability exists in Private Internet Access PIA version 3.3, which stems from the presence of unquoted paths in the service configuration that could lead to the execution of arbitrary code by a local...
Microsoft Windows 缓冲区错误漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. Microsoft Windows suffers from a buffer error vulnerability. An attacker could exploit this vulnerability to gain elevated privileges. The following products and editions are affected:...
Microsoft Windows 资源管理错误漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. Microsoft Windows suffers from a resource management error vulnerability. An attacker could exploit this vulnerability to gain elevated privileges. The following products and versions are...
Microsoft Windows 竞争条件问题漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. Microsoft Windows suffers from a Competitive Conditions Issue vulnerability. An attacker could exploit this vulnerability to gain elevated privileges. The following...
Microsoft Windows 安全漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. Microsoft Windows has a security vulnerability. An attacker can exploit this vulnerability to gain elevated privileges. The following products and versions are...
Microsoft Windows Server 资源管理错误漏洞
Microsoft Windows Server is a suite of server operating systems from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows Server. An attacker could exploit this vulnerability to gain elevated privileges. The following products and editions are affected:...
Broadcom DX NetOps Spectrum 安全漏洞
Broadcom DX NetOps Spectrum is a network fault management and condition monitoring platform from Broadcom Corporation USA. A security vulnerability exists in Broadcom DX NetOps Spectrum version 24.3.10 and earlier, which stems from a user-controllable key resulting in an authorization bypass that...
PT-2026-3418
Name of the Vulnerable Software and Affected Versions UTT HiPER 810 version 1.7.4-141218 Description A buffer overflow issue exists in the strcpy function within the /goform/setSysAdm file of UTT HiPER 810. Manipulation of the passwd1 argument triggers the overflow. Remote exploitation is possibl...
PT-2026-3416
Name of the Vulnerable Software and Affected Versions Totolink LR350 version 9.3.5u.6369 B20220309 Description A flaw exists in the setWiFiEasyCfg function within the /cgi-bin/cstecgi.cgi file of the software. This issue stems from a buffer overflow that occurs when processing the ssid parameter...
