Exploit Collector
Acer Backup Manager Module 3.0.0.99 Unquoted Service Path

https://2.bp.blogspot.com/-x_QP5QrO-tY/WWlvkxoh72I/AAAAAAAAIQ4/t-2dHNJyeE0-qZNxsCg7sgdho_ipgPgbgCLcBGAs/s1600/h98.png
Acer Backup Manager Module version 3.0.0.99 suffers an unquoted service path vulnerability.

MD5 | 4c3a4c14d7a02e8f62c463c6ab22446d

Download
# Exploit Title: Acer Backup Manager Module 3.0.0.99 - 'IScheduleSvc.exe' Unquoted Service Path
# Discovery by: Emmanuel Lujan
# Discovery Date: 2021-05-19
# Vendor Homepage: https://www.acer.com/ac/en/US/content/home
# Tested Version: 3.0.0.99
# Vulnerability Type: Unquoted Service Path
# Tested on OS: Windows 7 Home Premium x64

# Step to discover Unquoted Service Path:

C:\>wmic service get name, pathname, displayname, startmode | findstr /i "Auto" | findstr /i /v "C:\Windows\\" | findstr /i /v """

NTI IScheduleSvc NTI ISch
eduleSvc C:\Program Files (x86)\NTI\Acer Backup Man
ager\IScheduleSvc.exe Auto
# Service info:

C:\>sc qc "NTI IScheduleSvc"
[SC] QueryServiceConfig SUCCESS

SERVICE_NAME: NTI IScheduleSvc
TYPE : 110 WIN32_OWN_PROCESS
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Acer Updater Service 1.2.3500.0 Unquoted Service Path

https://1.bp.blogspot.com/-LuDwp3Oo6oc/WWlvICvnykI/AAAAAAAAILo/OetpmDNBdyImnh7DlH6SrwI0NyzSCKSJACLcBGAs/s1600/h142.png
Acer Updater Service version 1.2.3500.0 suffers from an unquoted service path vulnerability.

MD5 | 876ca1fe372e508309168e7bb73a71da

Download
# Exploit Title: Acer Updater Service 1.2.3500.0 - 'UpdaterService.exe' Unquoted Service Path
# Discovery by: Emmanuel Lujan
# Discovery Date: 2020-11-26
# Vendor Homepage: https://www.acer.com/ac/en/US/content/home
# Tested Version: 1.2.3500.0
# Vulnerability Type: Unquoted Service Path
# Tested on OS: Windows 7 Home Premium x64

# Step to discover Unquoted Service Path:

C:\>wmic service get name, pathname, displayname, startmode | findstr /i "Auto" | findstr /i /v "C:\Windows\\" | findstr /i /v """

Live Updater Service Live Upd
ater Service C:\Program Files\Acer\Acer Updater\Updater
Service.exe Auto

# Service info:

C:\>sc qc "Live Updater Service"
[SC] QueryServiceConfig SUCCESS

SERVICE_NAME: Live updater Service
TYPE : 10 WIN32_OWN_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Program Files\Acer\Acer Updater\UpdaterService.exe
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Live Updater Service
DEPENDENCIES :
SERVICE_START_NAME : LocalSystem

#Exploit:

A successful attempt would require the local user to be able to insert their code in the system root path undetected by the OS or other
security applications where it could potentially be executed during application startup or reboot. If successful, the local user's
code would execute with the elevated privileges of the application.

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
ASUS HID Access Service 1.0.94.0 Unquoted Service Path

https://4.bp.blogspot.com/-khon6dqGLkI/WWlvkVAr7qI/AAAAAAAAIQw/JwPgE9u6PkcV9AqklLFI3rOjfEX9YXC4QCLcBGAs/s1600/h96.png
ASUS HID Access Service version 1.0.94.0 suffers an unquoted service path vulnerability.

MD5 | ced9fbc60886991e95e55e7318b0aea8

Download
# Exploit Title: ASUS HID Access Service 1.0.94.0 - 'AsHidSrv.exe' Unquoted Service Path
# Date: 2020-05-19
# Exploit Author: Alejandra Sánchez
# Vendor Homepage: www.asus.com
# Version: 1.0.94.0
# Tested on: Windows 10 Pro x64 es

# Description:
ATK Hotkey 1.0.94.0 suffers from an unquoted search path issue impacting the service 'AsHidService'. This could potentially allow an
authorized but non-privileged local user to execute arbitrary code with elevated privileges on the system. A successful attempt would require
the local user to be able to insert their code in the system root path undetected by the OS or other security applications where it could
potentially be executed during application startup or reboot. If successful, the local user’s code would execute with the elevated privileges
of the application.

# Prerequisites
Local, Non-privileged Local User with restart capabilities

# Details

C:\>wmic service get name, pathname, displayname, startmode | findstr /i auto | findstr /i /v "C:\Windows\\" | findstr /i /v """
ASUS HID Access Service AsHidService C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsHidSrv.exe Auto

C:\>sc qc "AsHidService"
[SC] QueryServiceConfig CORRECTO

NOMBRE_SERVICIO: AsHidService
TIPO : 10 WIN32_OWN_PROCESS
TIPO_INICIO : 2 AUTO_START
CONTROL_ERROR : 1 NORMAL
NOMBRE_RUTA_BINARIO: C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsHidSrv.exe
GRUPO_ORDEN_CARGA :
ETIQUETA : 0
NOMBRE_MOSTRAR : ASUS HID Access Service
DEPENDENCIAS :
NOMBRE_INICIO_SERVICIO: LocalSystem


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Microsoft HTTP Protocol Stack Remote Code Execution

https://2.bp.blogspot.com/-466o0SY5wbQ/WWlvXOxbxYI/AAAAAAAAIOQ/eHwtwujRsQI9h-mxYQXglBmw7d5gufaKwCLcBGAs/s1600/h51.png
Proof of concept exploit for the HTTP protocol stack remote code execution vulnerability related to a use-after-free dereference in http.sys.

MD5 | 231a2e9926b68408725ba7d1ab0d8acd

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
XSS Armazenado Via Upload de Foto

https://cdn-images-1.medium.com/max/787/0*kNB7Hf9pfVYE9WGV.jpg
Nessa ultima semana (15/05) eu estava estudando por artigos e reports da hackerone, até que me deparei com uma falha de XSS armazenado por…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Scene, The Pirates, and The Empress

https://cdn-images-1.medium.com/max/1200/1*39HpvjiYAfq1fDD1_iMESQ.png
How an increasingly radicalized society has shaped the world of video game cracking

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Beware of fake accounts, links, and websites

https://cdn-images-1.medium.com/max/1280/1*Ml4orvr4NtT6zkVkCzwDIA.jpeg
In anticipation of the launch of FORSAGE BUSD, we are observing an increase of fake accounts and sites that pose as official pages and…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
When the Dark Side took down a pipeline with ransomware

https://cdn-images-1.medium.com/max/2400/1*EWm0yVND-_MGL_PW6hXMdg.jpeg
Generally when you see “Darkside” trending on social media, it’s about something Star Wars related. Such was not the case recently, but…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
BrightScan #ThreatIntelThursday | LAND Attacks

https://cdn-images-1.medium.com/max/1920/1*UdXHpAW20FUh3gE5HDy3-A.png
By: Sarah King

Continue reading on OpenAVN »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Exhibition of Rats. Comparing the best RATs for attacks.

https://cdn-images-1.medium.com/max/1188/0*GKhrmuqoOSIhp1G3.jpg
Let’s Hunt with Rats :)

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Web Pentesting for Beginners: OS command injection

https://cdn-images-1.medium.com/max/1255/1*4WNByaX6RE_NDZamtwnxLQ.png
Hello everyone, in this tutorial we shall discuss about Operating system (OS) Command Injection.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video