CVE-2021-44596

Wondershare LTD Dr. Fone as of 2021-12-06 version is affected by Remote code execution. Due to software design flaws an unauthenticated user can communicate over UDP with the "InstallAssistService.exe" service(the service is running under SYSTEM privileges) and manipulate it to execute malicious executable without any validation from a remote location and gain SYSTEM privileges

• http://packetstormsecurity.com/files/167035/Wondershare-Dr.Fone-12.0.7-Privilege-Escalation.htmlExploit, Third Party Advisory, VDB Entry
• https://medium.com/@tomerp_77017/wondershell-a82372914f26
• http://packetstormsecurity.com/files/167035/Wondershare-Dr.Fone-12.0.7-Privilege-Escalation.htmlExploit, Third Party Advisory, VDB Entry
• https://medium.com/%40tomerp_77017/wondershell-a82372914f26

Published

Apr 29, 2022

Last Modified

Jul 9, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-44586An issue was discovered in dst-admin v1.3.0. The product has…7.5
• CVE-2021-4459An authorized remote attacker can access files and directori…6.5
• CVE-2021-44590In libming 0.4.8, a memory exhaustion vulnerability exist in…6.5
• CVE-2021-44591In libming 0.4.8, the parseSWF_DEFINELOSSLESS2 function in u…6.5
• CVE-2021-44593Simple College Website 1.0 is vulnerable to unauthenticated …8.1
• CVE-2021-44595Wondershare Dr. Fone Latest version as of 2021-12-06 is vuln…8.8
• CVE-2021-44597Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-44598Attendance Management System 1.0 is affected by a Cross Site…6.1
• CVE-2021-44599The id parameter from Online Enrollment Management System 1.…7.5
• CVE-2021-4460In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2021-44600The password parameter on Simple Online Mens Salon Managemen…7.5
• CVE-2021-44607A Cross Site Scripting (XSS) vulnerability exists in FUEL-CM…5.4