CVE-2023-48861

DLL hijacking vulnerability in TTplayer version 7.0.2, allows local attackers to escalate privileges and execute arbitrary code via urlmon.dll...

Spoofing

DLL hijacking vulnerability in TTplayer version 7.0.2, allows local attackers to escalate privileges and execute arbitrary code via urlmon.dll...

PT-2023-30990 · Microsoft · Urlmon.Dll

Name of the Vulnerable Software and Affected Versions: TTplayer version 7.0.2 Description: The issue allows local attackers to escalate privileges and execute arbitrary code via urlmon.dll. This is a result of a DLL hijacking vulnerability. Recommendations: For TTplayer version 7.0.2, consider...

CVE-2023-48861

DLL hijacking vulnerability in TTplayer version 7.0.2, allows local attackers to escalate privileges and execute arbitrary code via urlmon.dll...

CVE-2023-48861

DLL hijacking vulnerability in TTplayer version 7.0.2, allows local attackers to escalate privileges and execute arbitrary code via urlmon.dll...

CVE-2023-48861

CVE-2023-48861 affects TTplayer (TTplayer 7.0.2). The vulnerability is a DLL hijacking issue in urlmon.dll that allows local attackers to escalate privileges and execute arbitrary code. The available sources consistently describe the core impact but do not provide a confirmed patch. PT-2023-30990...

TTplayer Security Breach

TTplayer 千千静听 is a free audio media player from China's TTplayer company that supports multiple audio formats. A security vulnerability exists in TTplayer version 7.0.2, which originates from a DLL hijacking vulnerability. The vulnerability can be exploited by an attacker to elevate privileges vi...

CVE-2023-41613

EzViz Studio v2.2.0 is vulnerable to DLL hijacking...

CVE-2023-41613

EzViz Studio v2.2.0 is vulnerable to DLL hijacking...

Hardcoded credentials

EzViz Studio v2.2.0 is vulnerable to DLL hijacking...

CVE-2023-41613

EzViz Studio v2.2.0 is vulnerable to DLL hijacking...

CVE-2023-41613

EzViz Studio v2.2.0 is vulnerable to DLL hijacking...

CVE-2023-41613

EzViz Studio v2.2.0 is vulnerable to DLL hijacking. The root cause is that TcApi.dll is not reliably loaded from DLL search paths, allowing an attacker to place a malicious TcApi.dll in writable directories (for example, C:\Users\AppData\Local\Programs\Microsoft VS Code\bin\TcApi.dll or C:\Users\...

CVE-2023-45252

DLL Hijacking vulnerability in Huddly HuddlyCameraService before version 8.0.7, not including version 7.99, due to the installation of the service in a directory that grants write privileges to standard users, allows attackers to manipulate files, execute arbitrary code, and escalate privileges...

CVE-2023-45252

DLL Hijacking vulnerability in Huddly HuddlyCameraService before version 8.0.7, not including version 7.99, due to the installation of the service in a directory that grants write privileges to standard users, allows attackers to manipulate files, execute arbitrary code, and escalate privileges...

Design/Logic Flaw

DLL Hijacking vulnerability in Huddly HuddlyCameraService before version 8.0.7, not including version 7.99, due to the installation of the service in a directory that grants write privileges to standard users, allows attackers to manipulate files, execute arbitrary code, and escalate privileges...

PT-2023-29471 · Huddly · Huddlycameraservice

Name of the Vulnerable Software and Affected Versions: Huddly HuddlyCameraService versions prior to 8.0.7, excluding version 7.99 Description: An issue in HuddlyCameraService allows attackers to manipulate files and escalate privileges via the RollingFileAppender.DeleteFile method performed by th...

CVE-2023-45252

DLL Hijacking vulnerability in Huddly HuddlyCameraService before version 8.0.7, not including version 7.99, due to the installation of the service in a directory that grants write privileges to standard users, allows attackers to manipulate files, execute arbitrary code, and escalate privileges...

CVE-2023-45252

CVE-2023-45252 (and related CVE-2023-45253) affect Huddly HuddlyCameraService prior to 8.0.7 (excluding 7.99). The root cause is DLL hijacking from the installer placing the service in a directory writable by standard users, enabling file manipulation, remote code execution, and privilege escalat...

CVE-2023-4770

An uncontrolled search path element vulnerability has been found on 4D and 4D server Windows executables applications, affecting version 19 R8 100218. This vulnerability consists in a DLL hijacking by replacing x64 shfolder.dll in the installation path, causing an arbitrary code execution...