CVE-2025-62225

Optical Disc Archive Software provided by Sony Corporation registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege...

PT-2025-45085

Name of the Vulnerable Software and Affected Versions Roboticsware products affected versions not specified Description Multiple Roboticsware products register Windows services with unquoted file paths. A user with write permission to the system drive’s root directory may execute arbitrary code...

EUVD-2025-35653

NarSuS App registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege...

PT-2025-43430

Name of the Vulnerable Software and Affected Versions NarSuS App affected versions not specified Description The NarSuS App registers a Windows service using an unquoted file path. This allows a user with write access to the system drive's root directory to potentially execute arbitrary code with...

CVE-2025-61871

NAS Navigator2 Windows version by BUFFALO INC. registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege...

CVE-2025-61871

NAS Navigator2 Windows version by BUFFALO INC. registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege...

EUVD-2025-25503

Malicious code in bioql PyPI...

EUVD-2025-26882

Malicious code in bioql PyPI...

CVE-2025-59307

RAID Manager provided by Century Corporation registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege...

CVE-2025-59307

RAID Manager provided by Century Corporation registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege...

CVE-2025-59307

RAID Manager provided by Century Corporation registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege...

CVE-2025-59307

RAID Manager provided by Century Corporation registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege...

CVE-2025-59307

CVE-2025-59307 concerns Century Corporation’s RAID Manager. It is caused by an unquoted Windows service path, allowing a user with write access to the system drive root to execute arbitrary code with SYSTEM privileges. Affected product: RAID Manager. Root cause (CWE-428): unquoted service path. I...

Century Corporation RAID Manager 代码问题漏洞

Century Corporation RAID Manager is a hardware management software from Century Corporation, Japan. A code issue vulnerability exists in Century Corporation RAID Manager that stems from a Windows service registering unquoted file paths, which could cause a user with write access to the root...

CVE-2025-58400

RATOC RAID Monitoring Manager for Windows provided by RATOC Systems, Inc. registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege...

CVE-2025-58400

RATOC RAID Monitoring Manager for Windows provided by RATOC Systems, Inc. registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege...

PT-2025-34332 · Western Digital · Western Digital Kitfox For Windows

Name of the Vulnerable Software and Affected Versions: Western Digital Kitfox for Windows affected versions not specified Description: Western Digital Kitfox for Windows registers a Windows service with an unquoted file path. A user with write permission on the root directory of the system drive...

Diebold Nixdorf Vynamic Security Suite 安全漏洞

Diebold Nixdorf Vynamic Security Suite Diebold Nixdorf VSS is a security access suite from Diebold Nixdorf, USA. A security vulnerability exists in Diebold Nixdorf Vynamic Security Suite, which originates from the inability to validate file attributes during the pre-boot authorization process, an...

CVE-2024-40644

gitoxide An idiomatic, lean, fast & safe pure Rust implementation of Git. gix-path can be tricked into running another git.exe placed in an untrusted location by a limited user account on Windows systems. Windows permits limited user accounts without administrative privileges to create new...

Microsoft Windows SAM Local Privilege Escalation Vulnerability

If a Volume Shadow Copy VSS shadow copy of the system drive is available, users can read the SAM file which would allow any user to escalate privileges to SYSTEM level...