CVE-2024-47942

A vulnerability has been identified in Solid Edge SE2024 All versions V224.0 Update 9. The affected applications suffer from a DLL hijacking vulnerability. This could allow an attacker to execute arbitrary code via placing a crafted DLL file on the system...

CVE-2024-45874

A DLL hijacking vulnerability in VegaBird Vooki 5.2.9 allows attackers to execute arbitrary code / maintain persistence via placing a crafted DLL file in the same directory as Vooki.exe...

CVE-2024-45873

VegaBird Yaazhini 2.0.2 is affected by a DLL hijacking vulnerability that lets an attacker place a crafted DLL in the Yaazhini.exe directory to execute arbitrary code or maintain persistence. Exploitation involves dropping a DLL (e.g., dcomp.dll) in the application folder and launching Yaazhini.e...

CVE-2024-45874

Vulnerability: CVE-2024-45874 affects VegaBird Vooki 5.2.9. Risk arises from DLL hijacking by placing a crafted DLL in the same directory as Vooki.exe, enabling arbitrary code execution and potential persistence. Affected component is the Vooki application (VegaBird Vooki 5.2.9); root cause is lo...

CVE-2024-45873

A DLL hijacking vulnerability in VegaBird Yaazhini 2.0.2 allows attackers to execute arbitrary code / maintain persistence via placing a crafted DLL file in the same directory as Yaazhini.exe...

VegaBird Yaazhini 2.0.2 DLL Hijacking

==================================== CVE ID: CVE-2024-45873 Author: Iulian Florea Vendor: VegaBird Product: Vooki - Free Android APK & API Vulnerability ScannerYaazhini Vulnerability Type: DLL Hijacking ==================================== ==================================== Summary...

PT-2024-25789 · Entrust Datacard · Entrust Datacard Xps Card Printer Driver

Name of the Vulnerable Software and Affected Versions: Entrust Datacard XPS Card Printer Driver versions 8.5 and earlier without the dxp1-patch-E24-004 patch Entrust Datacard XPS Card Printer Driver versions 8.4 and earlier Description: The issue is related to insecure permissions in the Entrust...

CVE-2024-34329

CVE-2024-34329 affects Entrust Datacard XPS Card Printer Driver (versions 8.5 and earlier). The root cause is insecure permissions in the driver allowed by default installation paths, enabling unauthenticated local attackers to execute arbitrary code as SYSTEM via a crafted DLL payload. Multiple ...

CVE-2024-1182

Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Electric MC Works64 all versions, Mitsubishi Electri...

CVE-2024-1182

Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Electric MC Works64 all versions, Mitsubishi Electri...

CVE-2024-39708

An issue was discovered in the Agent in Delinea Privilege Manager formerly Thycotic Privilege Manager before 12.0.1096 on Windows. Sometimes, a non-administrator user can copy a crafted DLL file to a temporary directory used by .NET Shadow Copies such that privilege escalation can occur if the co...

CVE-2024-24912 Local privilege escalation in Harmony Endpoint Security Client for Windows via crafted DLL file

A local privilege escalation vulnerability has been identified in Harmony Endpoint Security Client for Windows versions E88.10 and below. To exploit this vulnerability, an attacker must first obtain the ability to execute local privileged code on the target system...

CVE-2024-27518

An issue in SUPERAntiSyware Professional X 10.0.1262 and 10.0.1264 allows unprivileged attackers to escalate privileges via a restore of a crafted DLL file into the C:\Program Files\SUPERAntiSpyware folder...

CVE-2024-27518

An issue in SUPERAntiSyware Professional X 10.0.1262 and 10.0.1264 allows unprivileged attackers to escalate privileges via a restore of a crafted DLL file into the C:\Program Files\SUPERAntiSpyware folder...

Check Point Response to CVE-2024-24912 - local privilege escalation in Harmony Endpoint Security Client for Windows via crafted DLL file

Symptoms - A local privilege escalation vulnerability has been identified in Harmony Endpoint Security Client for Windows versions E88.10 and lower. By manipulating the COM object, an attacker could load a specially crafted DLL. An attacker must first obtain the ability to execute local privilege...

CVE-2024-32488

In Foxit PDF Reader and Editor before 2024.1, Local Privilege Escalation could occur during update checks because weak permissions on the update-service folder allow attackers to place crafted DLL files there...

CVE-2024-32488

In Foxit PDF Reader and Editor before 2024.1, Local Privilege Escalation could occur during update checks because weak permissions on the update-service folder allow attackers to place crafted DLL files there...

CVE-2024-32488

CVE-2024-32488 describes a local privilege escalation in Foxit PDF Reader and Editor prior to 2024.1. The root cause is weak permissions on the update-service folder, which could allow an attacker to drop crafted DLLs during update checks and gain higher privileges. Affected component: update mec...

CVE-2024-32488

In Foxit PDF Reader and Editor before 2024.1, Local Privilege Escalation could occur during update checks because weak permissions on the update-service folder allow attackers to place crafted DLL files there...

CVE-2023-37849

A DLL hijacking vulnerability in Panda Security VPN for Windows prior to version v15.14.8 allows attackers to execute arbitrary code via placing a crafted DLL file in the same directory as PANDAVPN.exe...