CVE-2023-36167

This exploit demonstrates an unquoted service path vulnerability in AVG Anti-Spyware 7.5, where the service path contains spaces and is not enclosed in quotes, potentially allowing local privilege escalation via executable placement in the path.

This repository demonstrates an unquoted service path vulnerability in AVG Anti-Spyware 7.5, allowing arbitrary code execution via a crafted script targeting the guard.exe component. The PoC includes commands to identify the vulnerable service and its configuration.