4168 matches found
New Flaws in Top Antivirus Software Could Make Computers More Vulnerable
Cybersecurity researchers today disclosed details of security vulnerabilities found in popular antivirus solutions that could enable attackers to elevate their privileges, thereby helping malware sustain its foothold on the compromised systems. According to a report published by CyberArk research...
CVE-2020-5980
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in multiple components in which a securely loaded system DLL will load its dependencies in an insecure fashion, which may lead to code execution or denial of service...
DLL Hijacking in NVIDIA SMI
What is NVIDIA SMI? The NVIDIA System Management Interface nvidia-smi is a command line utility, based on top of the NVIDIA Management Library NVML, intended to aid in the management and monitoring of NVIDIA GPU devices. This utility allows administrators to query GPU device state and with the...
Cisco AnyConnect Privilege Escalation Exploit
The installer component of Cisco AnyConnect Secure Mobility Client for Windows prior to 4.8.02042 is vulnerable to path traversal and allows local attackers to create/overwrite files in arbitrary locations with system level privileges. The installer component of Cisco AnyConnect Secure Mobility...
CVE-2020-6654
A DLL Hijacking vulnerability in Eaton's 9000x Programming and Configuration Software v 2.0.38 and prior allows an attacker to execute arbitrary code by replacing the required DLLs with malicious DLLs when the software try to load vci11un6.DLL and cinpl.DLL...
Spoofing
A DLL Hijacking vulnerability in Eaton's 9000x Programming and Configuration Software v 2.0.38 and prior allows an attacker to execute arbitrary code by replacing the required DLLs with malicious DLLs when the software try to load vci11un6.DLL and cinpl.DLL...
CVE-2020-6654 DLL Hijacking
A DLL Hijacking vulnerability in Eaton's 9000x Programming and Configuration Software v 2.0.38 and prior allows an attacker to execute arbitrary code by replacing the required DLLs with malicious DLLs when the software try to load vci11un6.DLL and cinpl.DLL...
CVE-2020-6654
CVE-2020-6654 describes a DLL hijacking vulnerability in Eaton's 9000x Programming and Configuration Software v2.0.38 and earlier. The software loads vci11un6.DLL and cinpl.DLL and can load malicious DLLs, enabling arbitrary code execution. The CVSSv3.1 base score is 7.8 (HIGH) with LOCAL attack ...
Cisco AnyConnect Privilege Escalation
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cisco AnyConnect Privilege Escalations CVE-2020-3153 and CVE-2020-3433', 'Description' = %q The installer component of Cisco AnyConnect Secure...
Exploit for Uncontrolled Search Path Element in Cisco Anyconnect_Secure_Mobility_Client
PoCs for CVE-2020-3433, CVE-2020-3434, and CVE-2020-3435 Po...
Advantech WebAccess HMI Designer suffers from dll hijacking vulnerability (CNVD-2020-61113)
Advantech WebAccess/HMI Designer is an integrated human-machine interface development tool. Advantech WebAccess HMI Designer suffers from a dll hijacking vulnerability that can be exploited by attackers to gain administrator privileges...
CVE-2020-7807
CVE-2020-7807 maps to a DLL hijacking vulnerability during installation of LG Electronics software. Affected components are LGPCSuite_Setup (Windows x86/x64) 1.0.0.3 and related installers IPSFULLHD, LG_ULTRAWIDE, ULTRA_HD_Driver Setup (Windows x86/x64) 1.0.0.9. The root cause is “Missing Support...
CVE-2020-7807 DLL Hijacking Vulnerabilities During Installation of LG Electronics Software
A vulnerability that can hijack a DLL file that is loaded during productsLGPCSuiteSetup, IPSFULLHD, LGULTRAWIDE, ULTRAHDDriver Setup installation into a DLL file that the hacker wants. Missing Support for Integrity Check vulnerability in COMPONENT of LG Electronics LGPCSuiteSetup, IPSFULLHD,...
Extreme Online Game Accelerator has a dll hijacking vulnerability
Extreme Online Game Accelerator is a game gas pedal software. Extreme Online Game Accelerator has a dll hijacking vulnerability. An attacker can exploit this vulnerability to execute malicious code...
Meteor Game Accelerator has dll hijacking vulnerability
Meteor Game Accelerator is a free online game gas pedal. Meteor Game Accelerator has a dll hijacking vulnerability. An attacker can exploit this vulnerability to execute malicious code...
CVE-2020-24162
The Shenzhen Tencent app 5.8.2.5300 for PC platforms from Tencent App Center has a DLL hijacking vulnerability. Attackers can use this vulnerability to execute malicious code...
CVE-2020-24161
Guangzhou NetEase Mail Master 4.14.1.1004 on Windows has a DLL hijacking vulnerability. Attackers can use this vulnerability to execute malicious code...
CVE-2020-24159
NetEase Youdao Dictionary has a DLL hijacking vulnerability, which can be exploited by attackers to gain server permissions. This affects Guangzhou NetEase Youdao Dictionary 8.9.2.0...