Erick Galindo

The `tftpt.exe` service binary contains an unquoted service path issue. This occurs when a service path contains spaces and is not enclosed in quotation marks, allowing a local attacker to place a malicious executable in the directory path. This executable can then be run with system privileges during service startup or a system reboot.

An unquoted service path exists in the `rpdsvc.exe` binary. This allows local attackers to escalate privileges by placing malicious executables in unquoted path directories, which are then executed with LocalSystem privileges during service startup or system reboot. An unquoted service path occurs when a service path contains spaces and is not enclosed in quotation marks, allowing the operating system to potentially execute a different file with a shorter name in the path.

BOOTP Turbo version 2.0.0.1253 contains an unquoted service path vulnerability in its Windows service configuration. An attacker can exploit the unquoted path to execute arbitrary code with elevated LocalSystem privileges during system startup or reboot.

The software contains an unquoted service path vulnerability in its service configuration. This allows local attackers to execute code with elevated privileges. The vulnerable path is located at 'C:Program FilesDHCP Broadband 4dhcpt.exe', enabling attackers to inject malicious code that executes during service startup with LocalSystem permissions.

The software contains a denial of service issue that allows attackers to crash the application. This is achieved by overflowing the container folder input field. An attacker can paste a large buffer of repeated characters into the Sandbox container folder setting, which triggers an application crash.

DiskBoss Service version 12.2.18 contains an unquoted service path vulnerability in its binary path configuration. This allows local attackers to execute code with elevated privileges. Attackers can exploit the unquoted path by placing malicious executables in potential path locations to gain system-level access during service startup.

Sandboxie Plus version 0.7.4 has an issue with an unquoted service path in the SbieSvc service. This allows local attackers to potentially run code with elevated privileges. The issue occurs because of the unquoted path, which can be exploited during system startup or reboot to execute malicious executables with LocalSystem permissions.

WifiHotSpot 1.0.0.0 contains an unquoted service path vulnerability in `WifiHotSpotService.exe`. This allows local attackers to execute code with elevated privileges. The vulnerability can be exploited during system startup or reboot by injecting and running malicious executables with LocalSystem permissions.

The software contains an unquoted service path vulnerability in its Windows service configurations. This allows local attackers to execute code with elevated privileges. The vulnerability exists due to unquoted file paths in SpyEmergencyHealth.exe and SpyEmergencySrv.exe, enabling malicious code injection during system startup or service restart.

The application contains a flaw that allows for denial of service. An attacker can cause the application to crash by providing a large input to the registration code field. Specifically, pasting a buffer of 256 repeated characters into the registration key field can lead to application instability and a potential crash. The vulnerable input field is the registration key field.

NBMonitor version 1.6.8 is subject to a denial of service condition. An attacker can cause the application to crash by providing a specially crafted input to the registration code field. Specifically, pasting a 256-character buffer into the `registration key` field triggers an application crash and potential system instability. The vulnerable input field is associated with the application’s registration process.

Nsauditor 3.2.3 contains a denial of service issue in the registration code input field. An attacker can crash the application by pasting a large buffer of 256 repeated characters into the `Key` field. This impacts the application's availability.