CVE-2019-20400

Summary: CVE-2019-20400 is a DLL hijacking vulnerability in Atlassian Jira when used with Tomcat, prior to version 8.5.2. Local attackers with permission can place a DLL in a directory on the global PATH, enabling code injection via DLL hijacking. The issue is documented across multiple sources (...

Confluence on Windows was vulnerable to DLL hijacking - CVE-2019-20406

The usage of Tomcat in Confluence on the Microsoft Windows operating system before version 7.0.5, from version 7.1.0 before version 7.1.1 allows local system attackers who have permission to write a dll file in a directory in the global path environmental variable variable to inject code & escala...

Confluence on Windows was vulnerable to DLL hijacking - CVE-2019-20406

The usage of Tomcat in Confluence on the Microsoft Windows operating system before version 7.0.5, from version 7.1.0 before version 7.1.1 allows local system attackers who have permission to write a dll file in a directory in the global path environmental variable variable to inject code & escala...

Abusing DLL Misconfigurations — Using Threat Intelligence to Weaponize R&D

DLL Abuse Techniques Overview Dynamic-link library DLL side-loading occurs when Windows Side-by-Side WinSxS manifests are not explicit about the characteristics of DLLs being loaded by a program. In layman’s terms, DLL side-loading can allow an attacker to trick a program into loading a malicious...

Tencent micro cloud has dll hijacking vulnerability

Micro Cloud is an intelligent cloud service created by Tencent for its users. A dll hijacking vulnerability exists in the Tencent Micro Cloud client. An attacker can exploit this vulnerability to execute arbitrary code...

DLL Hijacking Vulnerability in Foxmail

Foxmail is a domestic e-mail client software, providing Internet standard-based e-mail sending and receiving, digital signature and encryption, local mailbox mail search and anti-spam and other functions. Foxmail has a DLL hijacking vulnerability that can be exploited by attackers to execute...

DLL Hijacking Vulnerability in Jiangmin Firewall

JFW is a network security protection tool designed by Beijing JMX Technology Co., Ltd. to address the safety of individual users on the Internet. JFW has a DLL hijacking vulnerability, which can be exploited by attackers to execute arbitrary code...

Onionhead Cloud Reinstallation suffers from DLL hijacking vulnerability

Onionhead Cloud Reinstall is a powerful one-key reinstallation system tool, intelligent adaptation of the current system environment, DOS and PE dual-mode free switching; support for GHO, WIM, ESD, ISO and other image suffixes; support for unattended installation of the windows system under the...

VMware Horizon View Agent 7.x < 7.5.4 / 7.10.1 / 7.11.0 Privilege Escalation (VMSA-2019-0023)

The VMware Horizon View Agent installed on the remote host is 7.x prior to 7.5.4, 7.10.1, or 7.11.0. It is, therefore, affected by a DLL hijacking vulnerability due to insecure loading of a DLL by Cortado Thinprint. An authenticated, local attacker with normal user privileges can exploit this to...

Softmedia Rubik's Cube is vulnerable to dll hijacking.

Softmedia Magic is a system optimization software developed by Qingdao Softmedia Network Technology Co. The client side of iSoftMedia Magic has a dll hijacking vulnerability, which can be exploited by attackers to execute arbitrary code...

115 PC version suffers from dll hijacking vulnerability

115 PC version is a collection of 115, 115 organization, browser PC client of Guangdong One One Five Technology Co. 115 PC client has a dll hijacking vulnerability, which can be exploited by an attacker to execute arbitrary code...

Ant Browser suffers from dll hijacking vulnerability

Ant Browser is a lightweight browser software developed by Beijing Ant Browser Company. Ant Browser suffers from a dll hijacking vulnerability that can be exploited by attackers to execute arbitrary code...

All K Song has a dll hijacking vulnerability

All K Song is a Tencent's K song software based on socialization of acquaintances, to meet friends with songs, singing life happily. It supports QQ and WeChat login, song ordering, song recording, MV recording, tuning, work saving and publishing. There is a dll hijacking vulnerability in the clie...

Sailfish Browser suffers from a dll hijacking vulnerability

Sailfish Browser is a web browser. A dll hijacking vulnerability exists in the Sailfish Browser client, which can be exploited by attackers to execute arbitrary code...

Oriental Fortune PC client suffers from dll hijacking vulnerability

Oriental Wealth PC Client is a free stock speculation software developed by Oriental Wealth. There is a dll hijacking vulnerability in Oriental Wealth PC Client, which can be exploited by attackers to execute arbitrary code...

Xiaozhi Dual Core Browser suffers from dll hijacking vulnerability

Xiaozhi Duo Browser, a secure dual-core browser with built-in Chromium and IE kernels. Xiaozhi Dual Core Browser suffers from a dll hijacking vulnerability, which can be exploited by attackers to gain server privileges...

Xiaozhi Desktop is vulnerable to dll hijacking

Xiaozhi Desktop is a desktop organizer developed by Shenzhen Evergreen Technology Co. to improve office efficiency. Xiaozhi Desktop has a dll hijacking vulnerability, which can be exploited by attackers to execute arbitrary code...

CCTV Video for PC suffers from dll hijacking vulnerability

CCTV for PC is a live network TV broadcasting software. CCTV Video for PC suffers from a dll hijacking vulnerability, which can be exploited by attackers to load dll files and execute arbitrary code...

2345 Security Guard suffers from dll hijacking vulnerability

2345 Security Guard is the security software of Shanghai 2-3-4-5 Network Technology Co. 2345 Security Guard has a dll hijacking vulnerability, which can be exploited by attackers to load malicious dlls and execute malicious code...

2345 Accelerate Browser suffers from dll hijacking vulnerability

2345 Accelerated Browser is a dual-core browser Chromium and IE dual-core promoted by Shanghai 2,3,4,5 Network Technology Co. 2345 Accelerated Browser has a dll hijacking vulnerability, which can be exploited by attackers to load a malicious dll and execute malicious code...