CVE-2022-50901

Wondershare Dr.Fone 11.4.9 has an unquoted service path in the DFWSIDService located at C:\Program Files (x86)\Wondershare\Wondershare Dr.Fone, enabling local users to potentially execute arbitrary code with LocalSystem privileges. The CVE is documented with public references and an exploit in Ex...

CVE-2022-50901 Wondershare Dr.Fone 11.4.9 - 'DFWSIDService' Unquoted Service Path

Wondershare Dr.Fone 11.4.9 contains an unquoted service path vulnerability in the DFWSIDService that allows local users to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files x86\Wondershare\Wondershare Dr.Fone\ to inject malicious executables that woul...

CVE-2022-50902 Wondershare FamiSafe 1.0 - 'FSService' Unquoted Service Path

Wondershare FamiSafe 1.0 contains an unquoted service path vulnerability in the FSService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files x86\Wondershare\FamiSafe\ to inject malicious code that would run wit...

CVE-2022-50901 Wondershare Dr.Fone 11.4.9 - 'DFWSIDService' Unquoted Service Path

Wondershare Dr.Fone 11.4.9 contains an unquoted service path vulnerability in the DFWSIDService that allows local users to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files x86\Wondershare\Wondershare Dr.Fone\ to inject malicious executables that woul...

CVE-2022-50900 Wondershare Dr.Fone 12.0.18 - 'Wondershare InstallAssist' Unquoted Service Path

Wondershare Dr.Fone 12.0.18 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with elevated system privileges. Attackers can exploit the misconfigured service path to insert malicious code that will be executed with LocalSystem permissions during...

CVE-2022-50900

Wondershare Dr.Fone 12.0.18 is affected by an unquoted service path vulnerability in the Wondershare InstallAssist component. The root cause is a misconfigured unquoted service path that allows a local user to insert and execute arbitrary code at service startup, yielding LocalSystem privileges. ...

CVE-2022-50900 Wondershare Dr.Fone 12.0.18 - 'Wondershare InstallAssist' Unquoted Service Path

Wondershare Dr.Fone 12.0.18 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with elevated system privileges. Attackers can exploit the misconfigured service path to insert malicious code that will be executed with LocalSystem permissions during...

CVE-2022-50808 CoolerMaster MasterPlus 1.8.5 - 'MPService' Unquoted Service Path

CoolerMaster MasterPlus 1.8.5 contains an unquoted service path vulnerability in the MPService that allows local attackers to execute code with elevated system privileges. Attackers can drop a malicious executable in the service path and trigger code execution during service startup or system...

CVE-2022-50808

CVE-2022-50808 affects Cooler Master MasterPlus 1.8.5, where the MPService has an unquoted service path vulnerability. This allows a local attacker to drop a malicious executable in the service path and trigger code execution with elevated privileges during service startup or system reboot. The d...

CVE-2022-50693 Splashtop 8.71.12001.0 - Unquoted Service Path

Splashtop 8.71.12001.0 contains an unquoted service path vulnerability in the Splashtop Software Updater Service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files x86\Splashtop\Splashtop Software Updater\ to inject...

CVE-2022-50693

Affected software: Splashtop 8.71.12001.0. Vulnerability: unquoted service path in the Splashtop Software Updater Service, allowing local attackers to inject malicious executables and escalate privileges via the unquoted path at C:\Program Files (x86)\Splashtop\Splashtop Software Updater. Root ca...

PT-2026-2376

Name of the Vulnerable Software and Affected Versions Wondershare Dr.Fone version 12.0.18 Description Wondershare Dr.Fone version 12.0.18 contains an unquoted service path issue. This allows local users to execute arbitrary code with elevated system privileges. The misconfigured service path can ...

ITeCProteccioAppServer 代码问题漏洞

ITeCProteccioAppServer is a backend service component from ITeC. A code issue vulnerability exists in ITeCProteccioAppServer that stems from the service path not being quoted, which could allow a local attacker to execute code and elevate system privileges...

PT-2026-2414

Name of the Vulnerable Software and Affected Versions CONTPAQi AdminPAQ version 14.0.0 Description The software contains an unquoted service path issue in the AppKeyLicenseServer service, which operates with LocalSystem privileges. An attacker can exploit this to inject malicious code into the...

PT-2026-2361

Name of the Vulnerable Software and Affected Versions Splashtop version 8.71.12001.0 Description The software contains an unquoted service path vulnerability within the Splashtop Software Updater Service. This allows local attackers to potentially execute arbitrary code. The vulnerability exists...

PT-2026-2428

Name of the Vulnerable Software and Affected Versions Tftpd32 SE version 4.60 Description The software contains an unquoted service path issue that may allow local attackers to execute arbitrary code with elevated privileges. Attackers can exploit the unquoted path in the service configuration to...

PT-2026-2421

Name of the Vulnerable Software and Affected Versions Outline version 1.6.0 Description The software contains an unquoted service path, potentially allowing local attackers to execute arbitrary code with elevated system privileges. Exploitation involves the unquoted service path in the...

PT-2026-2380

Name of the Vulnerable Software and Affected Versions Wondershare UBackit version 2.0.5 Description The software contains an unquoted service path issue. This allows local users to potentially execute arbitrary code with elevated system privileges. An attacker can exploit the unquoted path in the...

PT-2026-2426

Name of the Vulnerable Software and Affected Versions Mediconta version 3.7.27 Description Mediconta version 3.7.27 contains an unquoted service path vulnerability within the servermedicontservice. This allows local users to potentially execute code with elevated privileges. The vulnerability...

PT-2026-2404

Name of the Vulnerable Software and Affected Versions BlueSoleilCS version 5.4.277 Description BlueSoleilCS version 5.4.277 has a security issue related to an unquoted service path in its Windows service configuration. This could allow local attackers to execute arbitrary code. The vulnerable pat...