EUVD-2023-36693

Malicious code in bioql PyPI...

EUVD-2025-30921

Malicious code in bioql PyPI...

CVE-2025-54081

Sunshine is a self-hosted game stream host for Moonlight. Prior to version 2025.923.33222, the Windows service SunshineService is installed with an unquoted executable path. If Sunshine is installed in a directory whose name includes a space, the Service Control Manager SCM interprets the path...

CVE-2025-54081

Sunshine is a self-hosted game stream host for Moonlight. Prior to version 2025.923.33222, the Windows service SunshineService is installed with an unquoted executable path. If Sunshine is installed in a directory whose name includes a space, the Service Control Manager SCM interprets the path...

CVE-2025-54081 SunshineService Has Unquoted Service Path That Allows Local SYSTEM Code Execution

Sunshine is a self-hosted game stream host for Moonlight. Prior to version 2025.923.33222, the Windows service SunshineService is installed with an unquoted executable path. If Sunshine is installed in a directory whose name includes a space, the Service Control Manager SCM interprets the path...

📄 Netdata ndsudo 1.45.0 Privilege Escalation

ndsudo versions 1.45.0 and below have a vulnerability that allows an attacker to achieve privilege escalation. It leverages an untrusted search path, when searching for additional binary files, such as nvme. An attacker can create a malicious binary with the same name and add the directory of thi...

Exploit for CVE-2024-32019

Privilege Escalation via ndsudo Netdata Local Exploit Thi...

CVE-2025-5039

A maliciously crafted binary file, when present while loading files in certain Autodesk applications, could lead to execution of arbitrary code in the context of the current process due to an untrusted search path being utilized...

CVE-2025-5039

A maliciously crafted binary file, when present while loading files in certain Autodesk applications, could lead to execution of arbitrary code in the context of the current process due to an untrusted search path being utilized...

CVE-2025-5039

A maliciously crafted binary file, when present while loading files in certain Autodesk applications, could lead to execution of arbitrary code in the context of the current process due to an untrusted search path being utilized...

CVE-2025-5039

A maliciously crafted binary file, when present while loading files in certain Autodesk applications, could lead to execution of arbitrary code in the context of the current process due to an untrusted search path being utilized...

CVE-2025-47422

Advanced Installer before 22.6 has an uncontrolled search path element local privilege escalation vulnerability. When running as SYSTEM in certain configurations, Advanced Installer looks in standard-user writable locations for non-existent binaries and executes them as SYSTEM. A low-privileged...

CVE-2025-47422

Advanced Installer before 22.6 has an uncontrolled search path element local privilege escalation vulnerability. When running as SYSTEM in certain configurations, Advanced Installer looks in standard-user writable locations for non-existent binaries and executes them as SYSTEM. A low-privileged...

PT-2025-28461 · Unknown · Advanced Installer

Name of the Vulnerable Software and Affected Versions: Advanced Installer versions prior to 22.6 Description: The issue is related to an uncontrolled search path element local privilege escalation. When running as SYSTEM in certain configurations, Advanced Installer looks in standard-user writabl...

CVE-2025-47422

CVE-2025-47422 affects Advanced Installer prior to 22.6. The flaw is an uncontrolled search path element that, when running as SYSTEM, can read non-existent binaries from standard-user writable locations and execute them with SYSTEM privileges, allowing arbitrary SYSTEM code execution if a malici...

CVE-2025-5335

A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the Autodesk Installer application. Exploitation of this vulnerability may lead to code execution...

CVE-2025-5335

A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the Autodesk Installer application. Exploitation of this vulnerability may lead to code execution...

CVE-2025-5335

The CVE-2025-5335 case involves Autodesk Installer, where an untrusted search path in the installer could allow a local attacker to escalate privileges to NT AUTHORITY/SYSTEM and potentially execute code. Documented impact is privilege escalation with code execution risk; exploitation status and ...

PT-2025-24668

Name of the Vulnerable Software and Affected Versions Autodesk Installer affected versions not specified Description A maliciously crafted binary file, when downloaded, could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the Autodesk...

CVE-2021-35508

NMSAccess32.exe in TeraRecon AQNetClient 4.4.13 allows attackers to execute a malicious binary with SYSTEM privileges via a low-privileged user account. To exploit this, a low-privileged user must change the service configuration or overwrite the binary service...