Cisco Directory Connector Search Order Hijacking Vulnerability

A vulnerability in the search path processing of Cisco Directory Connector could allow an authenticated, local attacker to load a binary of their choosing. The vulnerability is due to uncontrolled search path elements. An attacker could exploit this vulnerability by placing a binary of their...

MS14-019 – Fixing a binary hijacking via .cmd or .bat file

Command .cmd and batch .bat files can be directly provided as input to the CreateProcess as if it is an executable. CreateProcess uses the cmd.exe automatically to run the input .cmd or .bat. Today, with the bulletin MS14-019 we are fixing a vulnerability, where in particular scenario it is...

Bloodshed Dev-C++ 4.9.9.2 Binary Hijacking Exploit

/ Exploit Title: Bloodshed Dev-C++ Binary Hijacking Exploit make.exe, mingw32-make.exe Date: August 25, 2010 Author: storm [email protected] Version: 4.9.9.2 Tested on: Windows Vista SP2 http://www.gonullyourself.org/ gcc -o make.exe Dev-C++-Binary.c gcc -o mingw32-make.exe Dev-C++-Binary....

Bloodshed Dev-C++ Binary Hijacking (make.exe, mingw32-make.exe)

Exploit for windows platform in category local exploits =============================================================== Bloodshed Dev-C++ Binary Hijacking make.exe, mingw32-make.exe =============================================================== / Exploit Title: Bloodshed Dev-C++ Binary Hijacking...