CVE-2023-36169

CVE-2023-36169 An issue in SlySoft Game Jackal Pro v.5.2.0.0 allows an attacker to execute arbitrary code via the server.exe component Exploit Title: Game Jackal Server v5 - Unquoted Service Path Date: 05/08/2023 Exploit Author: Idan Malihi Vendor Homepage: https://www.allradiosoft.ru Software...

CVE-2022-45988

CVE-2022-45988 StarSoftComm HP CooCare An elevation of privilege vulnerability exists I have contacted with hp-security-alert They have fixed this bug. About StarSoftComm CooCare HP-PSRT-IR 4106 The vendor responded with the following information: Follow these steps to update: 1. Launch eService ...

CVE-2023-36165

CVE-2023-36165 An issue in MiniTool Partition Wizard ShadowMaker v.12.7 allows an attacker to execute arbitrary code and gain privileges via the SchedulerService.exe component. Exploit Title: MiniTool Partition Wizard ShadowMaker v.12.7 - Unquoted Service Path Date: 05/08/2023 Exploit Author: Ida...

CVE-2017-1000475

CVE-2017-1000475: Freesshd Unquoted Service Path Prove of concept Windows 10 with freeSSHd 1.3.1, installed by default and with the option running as a system service. Command to check Unquoted Service Path. The service is unquoted by default. The process is running as SYSTEM by default. Create a...

CVE-2023-37800

Unquoted-Service Path in the Fortect - 5.0.0.7 - CVE-2023-37800 Unquoted Service Path in the Fortect - 5.0.0.7 Discoverer: Idan Malihi Description The component MainService.exe is vulnerable to unquoted service path: C:\Program Files\Fortect\MainService.exe Steps to Reproduce To exploit the...

CVE-2022-23909

CVE-2022-23909 Description: On Windows, the Sherpa Connector Service version 2020.2.20328.2050 contains an unquoted service path vulnerability, allowing locally authenticated users with administrative privileges to run malicious executables with LocalSystem privileges. In case of a poorly...

CVE-2023-36168

CVE-2023-36168 AVG AVG Anti-Spyware v.7.5의 문제로 인해 공격자가 조작된 스크립트를 guard.exe 구성 요소에 전달하여 임의 코드를 실행할 수 있습니다. 익스플로이트 제목: AVG Anti Spyware 7.5 - Unquoted Service Path 날짜: 05/08/2023 익스플로이트 작성자: Idan Malihi 공급업체 홈페이지: https://www.avg.com 소프트웨어 링크: https://www.avg.com/en-ww/homepagepc 버전: 7.5 테스트 환경:...

SharpPrivesc

SharpPrivesc Практикую C и собираю поверхности атак Privesc вместе. Пока что любительские вещи. Проверки Privesc и тому подобное. Я предпочел классы разбора командной строки от Spectreops, поэтому решил использовать их вместо других .net пакетов, таких как command line parser и т.д. Список дел:...

CVE-2023-36164

CVE-2023-36164 Проблема в MiniTool Partition Wizard ShadowMaker v.12.7 позволяет злоумышленнику выполнить произвольный код через компонент MTAgentService Название эксплойта: MiniTool Partition Wizard ShadowMaker v.12.7 - Неоцитированный путь службы Дата: 05/08/2023 Автор эксплойта: Idan Malihi...

CVE-2024-23774

CVE-2024-23774 - Unquoted Windows Service Path Vulnerability 정보는 추후에 제공될 예정입니다...

CVE-2022-35899

CVE-2022-35899 Unquoted Service Path Asus GameSdk Exploit Title: Asus GameSDK v1.0.0.4 - 'GameSDK.exe' Unquoted Service Path Privilege Escalation Date: 07/14/2022 Exploit Author: Angelo Pio Amirante Version: 1.0.0.4 Tested on: Windows 10 Patched version: 1.0.5.0 Step to discover the unquoted...

CVE-2025-14018

CVE-2025-14018: NetBT e-Fatura Privilege Escalation Vulnerability 📋 General Information Parameter| Value ---|--- CVE ID| CVE-2025-14018 Vulnerability Type| Local Privilege Escalation Unquoted Service Path CWE| CWE-428 Affected Product| NetBT e-Fatura Vulnerable Versions| 1.2.15 Exploit Author|...

CVE-2019-17658

FortiClient의 따옴표 없는 서비스 경로 취약점 CVE-2019-17658 Windows용 FortiClient 6.2.3 미만 버전은 따옴표 없는 서비스 경로 취약점에 취약합니다. 이는 공격자가 FortiClientConsole 실행 파일 서비스 경로를 통해 권한 상승을 얻을 수 있습니다. 기본 점수: 9.8 벡터: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 영향을 받는 구성 요소 FortiClient FortiTray 영향을 받는 제품 Windows용 FortiClient 버전...

CVE-2022-39959

CVE-2022-39959 Affected Vendor- Panini https://www.panini.com/en Affected Product - Panini Everest Engine Affected Version - 2.0.4 There is an Unquoted Service Path in Everest EngineEverestEngine.exe in version 2.0.4 on Windows. This allows an unauthorized local user to insert arbitrary code into...

CVE-2023-31747

root@kitploit: Exploit Title: Wondershare Filmora 12.2.9.2233 - Unquoted Service Path CVE-2023-31747 Date: 2023/04/23 Exploit Author: msd0pe Vendor Homepage: https://www.wondershare.com My Github: https://github.com/msd0pe-1 Wondershare Filmora: Versions = wmic service get...

CVE-2024-27673

CVE-2024-27673 ASUS Control Center Express = 01.06.15 - Unquoted Service Path Description: ASUS Control Center Express Version = 01.06.15 contains an unquoted service path which allows attackers to escalate privileges to the system level. Assuming attackers have write access to C:, the attackers...

CVE-2024-27462

CVE-2024-27462 Wondershare MobileTrans 4.5.6 - Unquoted Service Path Description: Wondershare Filmora versions 4.5.6 and lower contain multiple unquoted service path which allow attackers to escalate privileges to the system level. Impacted services WsAppService3 service binary Path C:\Program...

ProtonVPN v4.4.1 - Unquoted Service Path

Exploit Title: ProtonVPN v4.4.1 - Unquoted Service Path Date: 2026-06-22 Exploit Author: Milad Karimi Contact: [email protected] Zone-H: www.zone-h.org/archive/notifier=Ex3ptionaL Vendor Homepage: https://protonvpn.com/ Software Link: https://protonvpn.com/ Version: 4.4.1 Tested on: Windo...

CVE-2020-37254

Wondershare PDFelement 5.2.9 contains a privilege escalation vulnerability due to an unquoted service path in the WsAppService Windows service. Local attackers can place a malicious executable in the service path and execute code with LocalSystem privileges upon service restart or system reboot...

CVE-2021-47985

Brother SAPSprint 7.60 contains an unquoted service path vulnerability in the SAPSprint service binary that allows local attackers to escalate privileges. Attackers can place a malicious executable in the Program Files directory path to be executed with LocalSystem privileges when the service...