Lovecraft Universal Player suffers from dll hijacking vulnerability

Aqiyi Universal Player is a mainstream video and audio player developed by Aqiyi official independent research and development, supporting most of the mainstream media formats. There is a dll hijacking vulnerability in Aqiyi Universal Player, which can be exploited by an attacker to execute...

Renren Video pc client software suffers from dll hijacking vulnerability

YYeTs started out as a non-professional subtitle group for foreign film and television programs for the purpose of sharing, exchanging and learning. Formerly known as YYeTs Subtitle Group, it was founded in 2003 by a Canadian-Chinese student, Little Ghost God, who formally set up an independent...

Adobe Illustrator DLL Hijacking Vulnerability

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A DLL hijacking vulnerability exists in Adobe Illustrator CC 2019 23.1 and earlier versions for Window-based platforms, which can be exploited by attackers to elevate privileges...

CVE-2019-17665

NSA Ghidra before 9.0.2 is vulnerable to DLL hijacking because it loads jansi.dll from the current working directory...

CVE-2019-17665

NSA Ghidra before 9.0.2 is vulnerable to DLL hijacking because it loads jansi.dll from the current working directory...

Directory traversal

NSA Ghidra before 9.0.2 is vulnerable to DLL hijacking because it loads jansi.dll from the current working directory...

CVE-2019-17665

NSA Ghidra before 9.0.2 is vulnerable to DLL hijacking because it loads jansi.dll from the current working directory...

CVE-2019-17665

NSA Ghidra before 9.0.2 is vulnerable to DLL hijacking: it loads jansi.dll from the current working directory, enabling potential arbitrary-code execution when a crafted file is used. Affected product: Ghidra (open-source reverse engineering tool) prior to version 9.0.2. Root cause: loading jansi...

Keybase: Keybase client (Windows 10): Write files anywhere in userland using relative path in "download attachement" feature

Summary I've tested this vulnerability on Windows 10, with last keybase client. If a user click on "Download file" during a chat, an attacker can write files anywhere in userland. When downloading a file from a chat, the file should always be written in "Downloads" folder. Proof of concept You ne...

HP Touchpoint Analytics Opens PCs to Code Execution Attack

A security flaw, discovered in an open-source software program that is a key component of HP’s TouchPoint Analytics service, is opening up a wide swath of HP computers to attack. The vulnerability, if exploited by local attackers with administrative privileges, can allow them to execute arbitrary...

CVE-2019-16407

JetBrains ReSharper installers for versions before 2019.2 had a DLL Hijacking vulnerability...

Design/Logic Flaw

JetBrains ReSharper installers for versions before 2019.2 had a DLL Hijacking vulnerability...

CVE-2019-16407

Summary of CVE-2019-16407 (JetBrains ReSharper DLL Hijacking) : A DLL hijacking vulnerability affected JetBrains ReSharper installers for versions prior to 2019.2. The Red Hat/CNVD/NVD entries corroborate a DLL hijacking issue in the ReSharper installer, with security bulletin Q2-2019 noting the ...

CVE-2019-16407

JetBrains ReSharper installers for versions before 2019.2 had a DLL Hijacking vulnerability...

Razer: DLL Hijacking in Synapse 2 CrashSender1402.exe via version.dll

The tester determined that the Synapse 2 installed executable CrashSender1402.exe was subject to a DLL hijacking vulnerability. As this was no longer supported by the third party provider, Razer decided to remove this executable from future versions of Synapse 2...

Corel DVD MovieFactory suffers from dll hijacking vulnerability

Corel DVD MovieFactory is a dvd disc burning conversion tool. Corel DVD MovieFactory suffers from a dll hijacking vulnerability. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...

Corel PaintShop Pro 2020 suffers from dll hijacking vulnerability

Corel is a manufacturer specializing in digital multimedia applications. Corel PaintShop Pro 2020 suffers from a dll hijacking vulnerability. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...

CVE-2019-8076

Adobe application manager installer version 10.0 have an Insecure Library Loading DLL hijacking vulnerability. Successful exploitation could lead to Arbitrary Code Execution in the context of the current user...

CVE-2019-8076

The CVE-2019-8076 entry concerns Adobe Application Manager (AAM) installer version 10.0 with an Insecure Library Loading (DLL hijacking) vulnerability that could allow Arbitrary Code Execution in the current user context. Multiple sources corroborate that the flaw is located in the AAM installer ...

CVE-2019-8076

Adobe application manager installer version 10.0 have an Insecure Library Loading DLL hijacking vulnerability. Successful exploitation could lead to Arbitrary Code Execution in the context of the current user...