Lucene search
+L

4168 matches found

ICS
ICS
added 2024/02/22 7:00 a.m.81 views

Delta Electronics CNCSoft-B DOPSoft

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION : Low attack complexity Vendor : Delta Electronics Equipment : CNCSoft-B DOPSoft Vulnerability : Uncontrolled Search Path Element 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to achieve remote code...

7.8CVSS7.9AI score0.0039EPSS
SaveExploits0References10
Packet Storm
Packet Storm
added 2024/02/05 12:00 a.m.617 views

Sumatra PDF 3.5.2 DLL Hijacking

Exploit Title: Sumatra PDF 3.5.2 DLL Hijacking Date: 06.02.2024 Exploit Author: Ravishanka Silva Vendor Homepage: https://www.sumatrapdfreader.org/free-pdf-reader Software Link: https://www.sumatrapdfreader.org/download-free-pdf-viewer Version: 3.5.2 Tested on: Windows 10, Windows 11 CVE :...

7.4AI score
SaveExploits1
NVD
NVD
added 2024/01/29 7:15 p.m.33 views

CVE-2024-23940

Trend Micro uiAirSupport, included in the Trend Micro Security 2023 family of consumer products, version 6.0.2092 and below is vulnerable to a DLL hijacking/proxying vulnerability, which if exploited could allow an attacker to impersonate and modify a library to execute code on the system and...

7.8CVSS7.8AI score0.00636EPSS
SaveExploits1References3
Prion
Prion
added 2024/01/29 7:15 p.m.28 views

Spoofing

Trend Micro uiAirSupport, included in the Trend Micro Security 2023 family of consumer products, version 6.0.2092 and below is vulnerable to a DLL hijacking/proxying vulnerability, which if exploited could allow an attacker to impersonate and modify a library to execute code on the system and...

4.4CVSS7.7AI score0.00636EPSS
SaveExploits1References3Affected Software5
Vulnrichment
Vulnrichment
added 2024/01/29 6:22 p.m.12 views

CVE-2024-23940

Trend Micro uiAirSupport, included in the Trend Micro Security 2023 family of consumer products, version 6.0.2092 and below is vulnerable to a DLL hijacking/proxying vulnerability, which if exploited could allow an attacker to impersonate and modify a library to execute code on the system and...

7.7AI score0.00636EPSS
SaveExploits1References3
CVE
CVE
added 2024/01/29 6:22 p.m.92 views

CVE-2024-23940

Trend Micro uiAirSupport (Trend Micro Security 2023 family) is affected for version 6.0.2092 and below. The vulnerability is described as a DLL hijacking/proxying issue that could let an attacker impersonate/modify a library, run code on the system, and escalate privileges. Impact is described as...

7.8CVSS7.8AI score0.00636EPSS
SaveExploits1References3Affected Software5
Cvelist
Cvelist
added 2024/01/29 6:22 p.m.45 views

CVE-2024-23940

Trend Micro uiAirSupport, included in the Trend Micro Security 2023 family of consumer products, version 6.0.2092 and below is vulnerable to a DLL hijacking/proxying vulnerability, which if exploited could allow an attacker to impersonate and modify a library to execute code on the system and...

8.1AI score0.00636EPSS
SaveExploits1References3
OSV
OSV
added 2024/01/25 4:15 p.m.11 views

CVE-2023-3181

The C:\Program Files x86\Splashtop\Splashtop Software Updater\uninst.exe process creates a folder at C:\Windows\Tempnsu.tmp and copies itself to it as Au.exe. The C:\Windows\Tempnsu.tmp\Au.exe file is automatically launched as SYSTEM when the system reboots or when a standard user runs an MSI...

7.8CVSS5.5AI score0.00179EPSS
SaveExploits0References1
NVD
NVD
added 2024/01/25 4:15 p.m.42 views

CVE-2023-3181

The C:\Program Files x86\Splashtop\Splashtop Software Updater\uninst.exe process creates a folder at C:\Windows\Tempnsu.tmp and copies itself to it as Au.exe. The C:\Windows\Tempnsu.tmp\Au.exe file is automatically launched as SYSTEM when the system reboots or when a standard user runs an MSI...

7.8CVSS7.7AI score0.00179EPSS
SaveExploits0References1
Prion
Prion
added 2024/01/25 4:15 p.m.27 views

Design/Logic Flaw

The C:\Program Files x86\Splashtop\Splashtop Software Updater\uninst.exe process creates a folder at C:\Windows\Tempnsu.tmp and copies itself to it as Au.exe. The C:\Windows\Tempnsu.tmp\Au.exe file is automatically launched as SYSTEM when the system reboots or when a standard user runs an MSI...

4.3CVSS7.2AI score0.00179EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/01/25 3:22 p.m.40 views

CVE-2023-3181 Insecure Permissions in Splashtop Software Updater

The C:\Program Files x86\Splashtop\Splashtop Software Updater\uninst.exe process creates a folder at C:\Windows\Tempnsu.tmp and copies itself to it as Au.exe. The C:\Windows\Tempnsu.tmp\Au.exe file is automatically launched as SYSTEM when the system reboots or when a standard user runs an MSI...

7.8CVSS7.8AI score0.00179EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/01/25 3:22 p.m.8 views

CVE-2023-3181 Insecure Permissions in Splashtop Software Updater

The C:\Program Files x86\Splashtop\Splashtop Software Updater\uninst.exe process creates a folder at C:\Windows\Tempnsu.tmp and copies itself to it as Au.exe. The C:\Windows\Tempnsu.tmp\Au.exe file is automatically launched as SYSTEM when the system reboots or when a standard user runs an MSI...

7.8CVSS7.7AI score0.00179EPSS
SaveExploits0References1
CVE
CVE
added 2024/01/25 3:22 p.m.87 views

CVE-2023-3181

CVE-2023-3181 affects Splashtop Software Updater (uninst.exe). The uninstaller creates a temporary folder at C:\Windows\Temp~nsu.tmp, copies itself as Au_.exe into that folder, and then Au_.exe is launched as SYSTEM on reboot or during an MSI repair via Splashtop Streamer’s Windows Installer. The...

7.8CVSS7.6AI score0.00179EPSS
SaveExploits0References1Affected Software5
Positive Technologies
Positive Technologies
added 2024/01/25 12:00 a.m.21 views

PT-2024-12288 · Splashtop · Splashtop Streamer +1

Name of the Vulnerable Software and Affected Versions: Splashtop Software Updater affected versions not specified Description: The issue concerns the creation of a folder at C:WindowsTempnsu.tmp by the C:Program Files x86SplashtopSplashtop Software Updateruninst.exe process, which copies itself t...

7.8CVSS7.5AI score0.00179EPSS
SaveExploits0References6
OSV
OSV
added 2024/01/24 7:15 a.m.12 views

CVE-2023-51711

An issue was discovered in Regify Regipay Client for Windows version 4.5.1.0 allows DLL hijacking: a user can trigger the execution of arbitrary code every time the product is executed...

7.8CVSS6.2AI score0.00199EPSS
SaveExploits0References2
NVD
NVD
added 2024/01/24 7:15 a.m.18 views

CVE-2023-51711

An issue was discovered in Regify Regipay Client for Windows version 4.5.1.0 allows DLL hijacking: a user can trigger the execution of arbitrary code every time the product is executed...

7.8CVSS7.8AI score0.00199EPSS
SaveExploits0References2
Prion
Prion
added 2024/01/24 7:15 a.m.18 views

Design/Logic Flaw

An issue was discovered in Regify Regipay Client for Windows version 4.5.1.0 allows DLL hijacking: a user can trigger the execution of arbitrary code every time the product is executed...

4.4CVSS7.8AI score0.00199EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/01/24 12:00 a.m.10 views

PT-2024-14255 · Regify · Regify Regipay Client For Windows

Name of the Vulnerable Software and Affected Versions: Regify Regipay Client for Windows version 4.5.1.0 Description: An issue was discovered in Regify Regipay Client for Windows that allows DLL hijacking, enabling a user to trigger the execution of arbitrary code every time the product is...

7.8CVSS7.7AI score0.00199EPSS
SaveExploits0References7
CVE
CVE
added 2024/01/24 12:00 a.m.53 views

CVE-2023-51711

CVE-2023-51711 affects Regify Regipay Client for Windows, version 4.5.1.0. The issue is a DLL hijacking vulnerability that permits the execution of arbitrary code when the product runs. The Red Hat/CNNVD entries corroborate the DLL hijack description and the target is Regipay Client for Windows 4...

7.8CVSS7.8AI score0.00199EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/24 12:00 a.m.7 views

CVE-2023-51711

An issue was discovered in Regify Regipay Client for Windows version 4.5.1.0 allows DLL hijacking: a user can trigger the execution of arbitrary code every time the product is executed...

7.8AI score0.00199EPSS
SaveExploits0References2
Rows per page
Query Builder