关键信息 Exploit Title: Sync Breeze 13.6.18 - 'Multiple' Unquoted Service Path EDB-ID: 50023 CVE: N/A Author: Brian Rodriguez Type: Local exploit: {} Platform: Windows Date: 2021-06-17 Vulnerable App: Sync Breeze 13.6.18 漏洞描述 Discovery by: Brian Rodriguez Vendor Homepage: https://www.syncbreeze.com/ Software Links: - https://www.syncbreeze.com/setups_x64/syncbreezesrv_setup_v13.6.18_x64.exe - https://www.syncbreeze.com/setups_x64/syncbreezecent_setup_v13.6.18_x64.exe Tested Version: 13.6.18 Vulnerability Type: Unquoted Service Path Tested on: Windows 10 Enterprise 64 bits 发现未引用服务路径的步骤 其他信息