CVE-2025-66461

FULLBACK Manager Pro provided by GS Yuasa International Ltd. registers two Windows services with unquoted file paths. A user may execute arbitrary code with SYSTEM privilege if he/she has the write permission on the path to the directory where the affected product is installed...

CVE-2025-66461

Summary: The CVE-2025-66461 vulnerability affects GS Yuasa’s FULLBACK Manager Pro. The issue is unquoted file paths for two Windows services, enabling local user with write access to the installation directory to execute arbitrary code with SYSTEM privileges. Affected product (from sources): FULL...

GS Yuasa FULLBACK Manager Pro registers Windows services with unquoted file paths

Overview FULLBACK Manager Pro provided by GS Yuasa International Ltd. contains the following vulnerability. Unquoted search path or element CWE-428 - CVE-2025-66461 Kazuma Matsumoto of GMO Cybersecurity by IERAE, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer...

GS Yuasa International FULLBACK Manager Pro 代码问题漏洞

GS Yuasa International FULLBACK Manager Pro is a backup management tool from GS Yuasa International, Japan. A code issue vulnerability exists in GS Yuasa International FULLBACK Manager Pro that originates from an unquoted file path and could lead to the execution of arbitrary code by a user with...

ps.gs-yuasa.com Improper Access Control vulnerability OBB-3764458

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

yuasa.it Cross Site Scripting vulnerability OBB-1492377

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

yuasa.co.uk Cross Site Scripting vulnerability OBB-1492374

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

yuasa.com.tw Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1179094 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...