SharpPrivesc

SharpPrivesc Practicing C and bringing Privesc attack surfaces together. Still noob stuff. Privesc checks and the like. I preferred Spectreops command line parsing classes so decided to utilize theirs over other .net packages like command line parser etc. To-Do: Menu More Privesc Check modules...

CVE-2023-36164

CVE-2023-36164 An issue in MiniTool Partition Wizard ShadowMaker v.12.7 allows an attacker to execute arbitrary code via the MTAgentService component Exploit Title: MiniTool Partition Wizard ShadowMaker v.12.7 - Unquoted Service Path Date: 05/08/2023 Exploit Author: Idan Malihi Vendor Homepage:...

CVE-2023-36169

CVE-2023-36169 An issue in SlySoft Game Jackal Pro v.5.2.0.0 allows an attacker to execute arbitrary code via the server.exe component Exploit Title: Game Jackal Server v5 - Unquoted Service Path Date: 05/08/2023 Exploit Author: Idan Malihi Vendor Homepage: https://www.allradiosoft.ru Software...

CVE-2024-23774

CVE-2024-23774 - Vulnerabilidad de Ruta de Servicio de Windows sin Comillas La información se proporcionará a su debido tiempo...

CVE-2022-35899

CVE-2022-35899 Ruta de servicio sin comillas de Asus GameSDK Título del exploit: Asus GameSDK v1.0.0.4 - 'GameSDK.exe' Ruta de servicio sin comillas Escalada de privilegios Fecha: 14/07/2022 Autor del exploit: Angelo Pio Amirante Versión: 1.0.0.4 Probado en: Windows 10 Versión parcheada: 1.0.5.0...

CVE-2022-45988

CVE-2022-45988 StarSoftComm HP CooCare An elevation of privilege vulnerability exists I have contacted with hp-security-alert They have fixed this bug. About StarSoftComm CooCare HP-PSRT-IR 4106 The vendor responded with the following information: Follow these steps to update: 1. Launch eService ...

CVE-2017-1000475

CVE-2017-1000475: Freesshd Unquoted Service Path Prove of concept Windows 10 with freeSSHd 1.3.1, installed by default and with the option running as a system service. Command to check Unquoted Service Path. The service is unquoted by default. The process is running as SYSTEM by default. Create a...

CVE-2024-27673

CVE-2024-27673 ASUS Control Center Express = 01.06.15 - Ruta de Servicio Sin Comillas Descripción: ASUS Control Center Express Versión = 01.06.15 contiene una ruta de servicio sin comillas que permite a atacantes escalar privilegios al nivel de sistema. Asumiendo que los atacantes tengan acceso d...

CVE-2022-23909

CVE-2022-23909 Descripción: En Windows, el servicio Sherpa Connector Service versión 2020.2.20328.2050 contiene una vulnerabilidad de ruta de servicio sin comillas, que permite a usuarios autenticados localmente con privilegios administrativos ejecutar ejecutables maliciosos con privilegios de...

CVE-2024-27462

CVE-2024-27462 Wondershare MobileTrans 4.5.6 - Ruta de servicio sin comillas Descripción: Wondershare Filmora versiones 4.5.6 y anteriores contienen múltiples rutas de servicio sin comillas que permiten a los atacantes escalar privilegios al nivel del sistema. Servicios afectados Ruta del binario...

CVE-2023-37800

Unquoted-Service Path in the Fortect - 5.0.0.7 - CVE-2023-37800 Unquoted Service Path in the Fortect - 5.0.0.7 Discoverer: Idan Malihi Description The component MainService.exe is vulnerable to unquoted service path: C:\Program Files\Fortect\MainService.exe Steps to Reproduce To exploit the...

CVE-2023-36165

CVE-2023-36165 An issue in MiniTool Partition Wizard ShadowMaker v.12.7 allows an attacker to execute arbitrary code and gain privileges via the SchedulerService.exe component. Exploit Title: MiniTool Partition Wizard ShadowMaker v.12.7 - Unquoted Service Path Date: 05/08/2023 Exploit Author: Ida...

CVE-2023-36168

CVE-2023-36168 An issue in AVG AVG Anti-Spyware v.7.5 allows an attacker to execute arbitrary code via a crafted script to the guard.exe component Exploit Title: AVG Anti Spyware 7.5 - Unquoted Service Path Date: 05/08/2023 Exploit Author: Idan Malihi Vendor Homepage: https://www.avg.com Software...

CVE-2025-14018

CVE-2025-14018：NetBT e-Fatura 权限提升漏洞 📋 基本信息 参数| 值 ---|--- CVE ID| CVE-2025-14018 漏洞类型| 本地权限提升（未引用的服务路径） CWE| CWE-428 受影响产品| NetBT e-Fatura 受影响版本| sc qc InboxProcessor SC QueryServiceConfig SUCCESS SERVICENAME: InboxProcessor TYPE : 10 WIN32OWNPROCESS STARTTYPE : 2 AUTOSTART ERRORCONTROL : 1 NORMA...

CVE-2019-17658

Unquoted Service Path exploit in FortiClient CVE-2019-17658 FortiClient for Windows prior to 6.2.3 is vulnerable to an unquoted service path vulnerability. That may allow an attacker to gain elevated privileges via the FortiClientConsole executable service path. Base Score: 9.8 Vector:...

CVE-2022-39959

CVE-2022-39959 Vendor Afectado - Panini https://www.panini.com/en Producto Afectado - Panini Everest Engine Versión Afectada - 2.0.4 Existe una ruta de servicio sin comillas Unquoted Service Path en Everest Engine EverestEngine.exe en la versión 2.0.4 en Windows. Esto permite que un usuario local...

CVE-2023-31747

root@kitploit: Exploit Title: Wondershare Filmora 12.2.9.2233 - Unquoted Service Path CVE-2023-31747 Date: 2023/04/23 Exploit Author: msd0pe Vendor Homepage: https://www.wondershare.com My Github: https://github.com/msd0pe-1 Wondershare Filmora： 版本 = wmic service get...

ProtonVPN v4.4.1 - Unquoted Service Path

Exploit Title: ProtonVPN v4.4.1 - Unquoted Service Path Date: 2026-06-22 Exploit Author: Milad Karimi Contact: [email protected] Zone-H: www.zone-h.org/archive/notifier=Ex3ptionaL Vendor Homepage: https://protonvpn.com/ Software Link: https://protonvpn.com/ Version: 4.4.1 Tested on: Windo...

CVE-2023-54353

Chromacam 4.0.3.0 contains an unquoted service path vulnerability in the PsyFrameGrabberService that allows local attackers to execute arbitrary code by placing malicious executables in unquoted path directories. Attackers with write access to C:\ or subdirectories like C:\Program Files...

CVE-2020-37254

Wondershare PDFelement 5.2.9 contains a privilege escalation vulnerability due to an unquoted service path in the WsAppService Windows service. Local attackers can place a malicious executable in the service path and execute code with LocalSystem privileges upon service restart or system reboot...