CVE-2024-4130

A DLL hijack vulnerability was reported in Lenovo App Store that could allow a local attacker to execute code with elevated privileges...

CVE-2024-4089

CVE-2024-4089 describes a DLL hijack vulnerability in Lenovo Super File that could allow a local attacker to execute code with elevated privileges. The NVD entry lists a local attack vector with low complexity and a high impact on confidentiality, integrity, and availability (CVSS 3.1: AV:L/AC:L/...

CVE-2024-4089

A DLL hijack vulnerability was reported in Lenovo Super File that could allow a local attacker to execute code with elevated privileges...

CVE-2024-4089

A DLL hijack vulnerability was reported in Lenovo Super File that could allow a local attacker to execute code with elevated privileges...

PT-2024-25351 · Lenovo · Lenovo Service Framework

Name of the Vulnerable Software and Affected Versions: Lenovo Service Framework affected versions not specified Description: A DLL hijack vulnerability was reported in Lenovo Service Framework that could allow a local attacker to execute code with elevated privileges. The vulnerability affects...

PT-2024-29355 · Lenovo · Lenovo Emulator

Name of the Vulnerable Software and Affected Versions: Lenovo Emulator affected versions not specified Description: A DLL hijack vulnerability was reported that could allow a local attacker to execute code with elevated privileges. Recommendations: At the moment, there is no information about a...

PT-2024-25349 · Lenovo · Lenovo Personal Cloud

Name of the Vulnerable Software and Affected Versions: Lenovo Personal Cloud affected versions not specified Description: A DLL hijack vulnerability was reported that could allow a local attacker to execute code with elevated privileges. The issue affects multiple versions of Lenovo products...

Fortinet FortiClient DLL Hijacking via openssl.cnf (FG-IR-23-274)

The version of FortiClient installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-23-274 advisory. - A untrusted search path vulnerability in Fortinet FortiClientWindows 7.0.9 allows an attacker to perform a DLL Hijack...

PT-2023-22022 · Ncp · Ncp Secure Enterprise Client

Name of the Vulnerable Software and Affected Versions: NCP Secure Enterprise Client versions prior to 13.10 Description: The issue allows attackers to execute DLL files with SYSTEM privileges by creating a symbolic link from a %LOCALAPPDATA%TempNcpSupport location. This can lead to elevated...

CVE-2023-41840

A untrusted search path vulnerability in Fortinet FortiClientWindows 7.0.9 allows an attacker to perform a DLL Hijack attack via a malicious OpenSSL engine library in the search path...

CVE-2023-41840

A untrusted search path vulnerability in Fortinet FortiClientWindows 7.0.9 allows an attacker to perform a DLL Hijack attack via a malicious OpenSSL engine library in the search path...

Design/Logic Flaw

A untrusted search path vulnerability in Fortinet FortiClientWindows 7.0.9 allows an attacker to perform a DLL Hijack attack via a malicious OpenSSL engine library in the search path...

CVE-2023-41840

Summary: CVE-2023-41840 affects Fortinet FortiClient for Windows ( FortiClientWindows 7.0.9 ). The issue is a local untrusted search path that enables a DLL hijack by placing a malicious OpenSSL engine library in the search path. Connected sources provide concrete details: FortiClientWindows 7.0....

CVE-2023-41840

A untrusted search path vulnerability in Fortinet FortiClientWindows 7.0.9 allows an attacker to perform a DLL Hijack attack via a malicious OpenSSL engine library in the search path...

CVE-2023-41840

A untrusted search path vulnerability in Fortinet FortiClientWindows 7.0.9 allows an attacker to perform a DLL Hijack attack via a malicious OpenSSL engine library in the search path...

PT-2023-7194 · Fortinet · Forticlient

Name of the Vulnerable Software and Affected Versions: Fortinet FortiClientWindows version 7.0.9 Description: The issue is related to an untrusted search path vulnerability that allows an attacker to perform a DLL Hijack attack. This can be achieved by placing a malicious OpenSSL engine library i...

Exploit for CVE-2023-21746

It is an exploit module/toolkit targeting a vulnerability in a s...

TitanFTP 2.0.1.2102 - Path traversal to Remote Code Execution Exploit

Titan FTP Server Path Traversal Vulnerability in move-file Function Version: 2.0.1.2102 CVE-2023-22629 CWE-24: Path Traversal TitanFTP Server is vulnerable to a path traversal attack in the move-file function. An attacker can exploit this vulnerability by providing a specially crafted newPath...

PT-2022-4714 · Hewlett Packard · Hp Support Assistant +1

Name of the Vulnerable Software and Affected Versions: HP Support Assistant version 9 Description: The issue is related to a DLL hijacking vulnerability in HP Support Assistant, which uses HP Performance Tune-up as a diagnostic tool. This vulnerability can be exploited by an attacker to elevate...

Win32.Ransom.BlueSky MVID-2022-0632 Code Execution

Discovery / credits: Malvuln John Page aka hyp3rlinx c 2022 Original source: https://malvuln.com/advisory/961fa85207cdc4ef86a076bbff07a409.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Win32.Ransom.BlueSky Vulnerability: Arbitrary Code Execution Description: The BlueSky...