WonderShell

WonderShell - CVE - 2021-44595 | CVE - 2021-44596 発見者 BugSec のセキュリティ研究者である Netanel Cohen と Tomer Peled。 説明 Wondershare Dr.Fone を悪用する POC の例。 Dr.Fone は wondershare が開発したフォントールキットであり、RCE に対して脆弱です。 ネットワークアクセスのみで、SYSTEM ユーザーとしてリモートコードを実行することができます。 脆弱なサービス: InstallAssistService.exe ElevationService.ex...

Wondershare Dr.Fone 12.0.7 - Privilege Escalation (InstallAssistService) Exploit

Exploit Title: Wondershare Dr.Fone 12.0.7 - Privilege Escalation InstallAssistService Exploit Author: Netanel Cohen & Tomer Peled Vendor Homepage: https://drfone.wondershare.net/ Software Link: https://download.wondershare.net/drfonefull4008.exe Version: up to 12.0.7 Tested on: Windows 10 CVE :...

CVE-2021-44596

Wondershare LTD Dr. Fone as of 2021-12-06 version is affected by Remote code execution. Due to software design flaws an unauthenticated user can communicate over UDP with the "InstallAssistService.exe" servicethe service is running under SYSTEM privileges and manipulate it to execute malicious...

PT-2022-12182

Name of the Vulnerable Software and Affected Versions Wondershare LTD Dr. Fone as of 2021-12-06 version Description The issue is related to remote code execution due to software design flaws. An unauthenticated user can communicate over UDP with the "InstallAssistService.exe" service, which runs...