Service Tracing Privilege Escalation Exploit

This Metasploit module leverages a trusted file overwrite with a dll hijacking vulnerability to gain SYSTEM-level access on vulnerable Windows 10 x64 targets. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require...

Service Tracing Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/post/common' require 'msf/core/post/windows/priv' require 'msf/core/post/windows/registry' require 'msf/core/exploit/exe' require...

Google Earth Pro < 7.3.3 Multiple Vulnerabilities

The version of Google Earth Pro installed on the remote host is prior to 7.3.3. It is, therefore, affected by the following vulnerabilities : - A DLL hijacking vulnerability exists in the Windows installer due to the use of an untrusted search path. An unauthenticated, local attacker can exploit...

CVE-2019-20781

An issue was discovered in LG Bridge before April 2019 on Windows. DLL Hijacking can occur...

CVE-2019-20781

An issue was discovered in LG Bridge before April 2019 on Windows. DLL Hijacking can occur...

CVE-2019-20781

An issue was discovered in LG Bridge before April 2019 on Windows. DLL Hijacking can occur...

Design/Logic Flaw

An issue was discovered in LG Bridge before April 2019 on Windows. DLL Hijacking can occur...

CVE-2019-20781

CVE-2019-20781 affects LG Bridge on Windows prior to April 2019. The connected documents identify a DLL Hijacking condition as the issue, but do not provide specifics on vulnerable components, root cause details, affected versions beyond “before April 2019,” or remediation guidance. No exploitati...

CVE-2019-20781

An issue was discovered in LG Bridge before April 2019 on Windows. DLL Hijacking can occur...

EmEditor 19.8 - Insecure File Permissions

Exploit Title: EmEditor 19.8 - Insecure File Permissions Date: 2020-04-27 Exploit Author: SajjadBnd Vendor Homepage: https://www.emeditor.com/ Software Link: https://support.emeditor.com/en/downloads/suggested Version: 19.8 Tested on: Win10 Professional x64 Description EmEditor is a fast,...

DLL hijacking vulnerability in TIM Windows client (CNVD-2020-29413)

TIM is a cross-platform communication tool for team office collaboration. A DLL hijacking vulnerability exists in the TIM Windows client, which can be exploited by attackers to execute malicious code...

DLL hijacking in Jira Server & JSD via Tomcat - CVE-2019-20419

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to execute arbitrary code via a DLL hijacking vulnerability in Tomcat. Affected versions: version 8.5.5 8.6.0 ≤ version 8.7.2 Fixed versions: 8.5.5 8.7.2 8.8.0...

DLL hijacking in Jira Server & JSD via Tomcat - CVE-2019-20419

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to execute arbitrary code via a DLL hijacking vulnerability in Tomcat. Affected versions: version 8.5.5 8.6.0 ≤ version 8.7.2 Fixed versions: 8.5.5 8.7.2 8.8.0...

CVE-2020-8895 DLL Hijacking in Google Earth Pro Windows installer

Untrusted Search Path vulnerability in the windows installer of Google Earth Pro versions prior to 7.3.3 allows an attacker to insert malicious local files to execute unauthenticated remote code on the targeted system...

DLL Hijacking Vulnerability in Uplay pc Client Software of Shanghai Bihan Network Technology Co.

Uplay is a cross-platform launcher. Uplay pc client software of Shanghai Bihan Network Technology Co., Ltd. has a DLL hijacking vulnerability, which can be exploited by an attacker to inject an executable DLL file into the client process and execute arbitrary functions...

DLL hijacking vulnerability in Mint Accelerator of Wuhan Mint Technology Co.

Mint Accelerator is a network acceleration software designed to enhance cross-region game acceleration, web browsing, music appreciation, and video viewing. Wuhan Mint Technology Co. Mint Accelerator suffers from a DLL hijacking vulnerability, which can be exploited by an attacker to inject an...

Shenzhen Tencent Computer System Limited Tencent Game Box suffers from DLL hijacking vulnerability

Tencent game box is specially designed for web users to create game aids, with original hang-up bodyguard, convenient account multi-opening, exclusive game acceleration, selected game recommendations, high-quality game strategy, one-stop gift packages and other features. Shenzhen Tencent Computer...

PT-2020-20356 · Google · Google Earth Pro

Name of the Vulnerable Software and Affected Versions: Google Earth Pro versions prior to 7.3.3 Description: The issue allows an attacker to execute unauthenticated remote code on the targeted system by inserting malicious local files, utilizing a technique known as DLL hijacking. This is made...

Panda Accelerator of Jiangsu Youku Network Technology Co. Ltd. suffers from dll hijacking vulnerability

Panda gas pedal is a powerful online game gas pedal, using a new node intelligent matching algorithm, more stable and reliable transmission channel, optimized for steam and other platforms, effectively solving the problem of high latency and other issues for players. Ltd. Panda gas pedal dll...

Shenzhen Tencent Computer System Limited wegame suffers from DLL hijacking vulnerability

wegame is a tencent platform game assistant software. Shenzhen Tencent Computer Systems Limited wegame exists DLL hijacking vulnerability, an attacker can exploit the vulnerability in the client process to inject executable DLL file, to perform arbitrary functions...