Advertisement


Looking for a fix? Check your Codebase security with multiple scanners from Scanmycode.today


Edit Report

Our sensors found this exploit at: https://cxsecurity.com/ascii/WLB-2021010102

Below is a copy:

Max Secure Total Security Antivirus 19.0.4.035 - Unquoted Service Path
Title: Max Secure Total Security Antivirus 19.0.4.035 - Unquoted Service Path
Date: 2021-01-12
Author: Nir Yehoshua
Vendor: https://maxsecureantivirus.com/
Product: https://maxsecureantivirus.com/MaxTSDM.exe
Tested on: Windows Windows 10 x64 [eng]

PoC:

C:\Users\nir>wmic service get name, pathname | findstr "Max"
MaxCryptMonSrv                            C:\Program Files\Max Secure Total Security\MaxCryptMonSrv.exe                 
MaxMerger                                 C:\Program Files (x86)\Max Secure Total Security\MaxMerger.exe                
MaxWatchDogService                        C:\Program Files\Max Secure Total Security\MaxWatchDogService.exe             
MaxWsRegSrv                               C:\Program Files\Max Secure Total Security\MaxWsRegSrv.exe                    

Copyright ©2021 Exploitalert.

All trademarks used are properties of their respective owners. By visiting this website you agree to Terms of Use.