TrojanSpy.Win64.EMOTET.A MVID-2024-0684 Code Execution

Discovery / credits: Malvuln John Page aka hyp3rlinx c 2024 Original source: https://malvuln.com/advisory/f917c77f60c3c1ac6dbbadbf366ddd30.txt Contact: [email protected] Media: twitter.com/malvuln Threat: TrojanSpy.Win64.EMOTET.A Vulnerability: Arbitrary Code Execution Description: The malware...

SumatraPDF 3.5.2 DLL Hijacking

SumatraPDF 3.5.2 DLL Hijack Exploit Title: Sumatra PDF 3.5.2 DLL Hijack Date: 03.03.2024 Exploit Author: Krishna Vamshi Katta Rokkaiah Vendor Homepage: https://www.sumatrapdfreader.org/free-pdf-reader Software Link: https://www.sumatrapdfreader.org/download-free-pdf-viewer Version: 3.5.2 Tested o...

CVE-2020-28369

In BeyondTrust Privilege Management for Windows aka PMfW through 5.7, a SYSTEM installation causes Cryptbase.dll to be loaded from the user-writable location %WINDIR%\Temp...

Design/Logic Flaw

In BeyondTrust Privilege Management for Windows aka PMfW through 5.7, a SYSTEM installation causes Cryptbase.dll to be loaded from the user-writable location %WINDIR%\Temp...

CVE-2020-28369

BeyondTrust Privilege Management for Windows (PMfW) up to version 5.7 is affected. The issue arises when a SYSTEM installation causes Cryptbase.dll to be loaded from the user-writable %WINDIR%\Temp, enabling potential DLL hijacking and code injection. Affected component is Cryptbase.dll loaded du...

CVE-2020-28369: Uncontrolled Search Path Element

In BeyondTrust Privilege Management for Windows aka PMfW through 5.7, a SYSTEM installation causes Cryptbase.dll to be loaded from the user-writable location %WINDIR%\Temp...

CVE-2020-28369

In BeyondTrust Privilege Management for Windows aka PMfW through 5.7, a SYSTEM installation causes Cryptbase.dll to be loaded from the user-writable location %WINDIR%\Temp...

CVE-2023-3091

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in Captura up to 8.0.0. It has been declared as critical. This vulnerability affects unknown code in the library CRYPTBASE.dll. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The complexity of an attack i...

Design/Logic Flaw

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in Captura up to 8.0.0. It has been declared as critical. This vulnerability affects unknown code in the library CRYPTBASE.dll. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The complexity of an attack i...

Captura 代码问题漏洞

Captura is a free and open source screen recording tool from the individual developer Mathew Sachin. A code issue vulnerability exists in Captura 8.0.0 and prior versions, which stems from faulty code in the library CRYPTBASE.dll that can lead to uncontrolled search paths...

CVE-2023-3091

CVE-2023-3091 affects Captura up to version 8.0.0, with a vulnerability in the CRYPTBASE.dll library that leads to an uncontrolled search path. The issue is local, requires low privileges, and has high confidentiality, integrity, and availability impact per NVD metrics; exploitation is described ...

CVE-2023-3091 Captura CRYPTBASE.dll uncontrolled search path

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in Captura up to 8.0.0. It has been declared as critical. This vulnerability affects unknown code in the library CRYPTBASE.dll. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The complexity of an attack i...

CVE-2023-3091 Captura CRYPTBASE.dll uncontrolled search path

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in Captura up to 8.0.0. It has been declared as critical. This vulnerability affects unknown code in the library CRYPTBASE.dll. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The complexity of an attack i...

CVE-2023-3091: Uncontrolled Search Path Element

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in Captura up to 8.0.0. It has been declared as critical. This vulnerability affects unknown code in the library CRYPTBASE.dll. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The complexity of an attack i...

CVE-2020-27644

The Inventory module of the 1E Client 5.0.0.745 doesn't handle an unquoted path when executing %PROGRAMFILES%\1E\Client\Tachyon.Performance.Metrics.exe. This may allow remote authenticated users and local users to gain elevated privileges by placing a malicious cryptbase.dll file in %WINDIR%\Temp...

PT-2020-16743

Name of the Vulnerable Software and Affected Versions 1E Client version 5.0.0.745 Description The Inventory module of the 1E Client does not handle an unquoted path when executing %PROGRAMFILES%1EClientTachyon.Performance.Metrics.exe. This may allow remote authenticated users and local users to...

PT-2020-16744

Name of the Vulnerable Software and Affected Versions 1E Client version 5.0.0.745 Description The Inventory module of the 1E Client does not properly handle an unquoted path when executing Tachyon.Performance.Metrics.exe. This issue may allow remote authenticated users and local users to gain...

CVE-2020-27644: Unquoted Search Path or Element

The Inventory module of the 1E Client 5.0.0.745 doesn't handle an unquoted path when executing %PROGRAMFILES%\1E\Client\Tachyon.Performance.Metrics.exe. This may allow remote authenticated users and local users to gain elevated privileges by placing a malicious cryptbase.dll file in %WINDIR%\Temp...

1E Client 代码问题漏洞

1E Client is an agent-less endpoint management software from 1E USA. A security vulnerability exists in 1E Client version 5.0.0.745 that stems from %PROGRAMFILES%1EClientTachyon.Performance.Metrics.exe failing to handle unreferenced paths. This may allow a remote attacker to gain elevated...

Dropbox 54.5.90 DLL Hijacking

Document Title: =============== Dropbox 54.4.90 - Multiples DLL Injection/Code Execution Date of Discovery: ================== 2018-08-24 Exploitation Technique: ======================= Local Platfom Tested: =============== Windows 10 Technical Details & Description:...