Microsoft Data Sharing - Local Privilege Escalation (PoC)

Bug description: RpcDSSMoveFromSharedFilehandle,L"token",L"c:\blah1\pci.sys"; This function exposed over alpc, has a arbitrary delete vuln. Hitting the timing was pretty annoying. But my PoC will keep rerunning until c:\windows\system32\drivers\pci.sys is deleted. I believe it's impossible to hit...

CVE-2018-15976

Adobe Technical Communications Suite versions 1.0.5.1 and below have an insecure library loading dll hijacking vulnerability. Successful exploitation could lead to privilege escalation...

CVE-2018-15976

Adobe Technical Communications Suite (TCS) versions 1.0.5.1 and earlier are affected by an insecure library loading vulnerability (DLL hijacking) in the installer, which can lead to privilege escalation. The issue is documented as CVE-2018-15976. Based on sources, exploitation could result in hig...

CVE-2018-15974

CVE-2018-15974 affects Adobe FrameMaker on Windows, with versions 1.0.5.1 and earlier vulnerable to an insecure library loading (DLL hijacking) flaw that could enable privilege escalation on successful exploitation. Several connected sources corroborate this flaw and tie it to insecure DLL loadin...

Design/Logic Flaw

The Whale browser installer 0.4.3.0 and earlier versions allows DLL hijacking...

CVE-2018-12449

The Whale browser installer 0.4.3.0 and earlier versions allows DLL hijacking...

CVE-2018-12449

CVE-2018-12449 concerns DLL hijacking in the Whale browser installer up to version 0.4.3.0. Multiple sources (NVD, CVE records) describe the vulnerability and its impact as requiring local access with user interaction; CVSSv3 base score 7.8 HIGH indicating potential for high impact on confidentia...

CVE-2018-12449

The Whale browser installer 0.4.3.0 and earlier versions allows DLL hijacking...

Four Critical Flaws Patched in Adobe Digital Edition

Adobe on Tuesday issued patches for 16 vulnerabilities spanning several of its products. The most serious of those flaws, four critical glitches in Adobe Digital Edition, could enable arbitrary code-execution. Adobe Digital Editions is an reader software program used for acquiring, managing and...

Adobe Framemaker DLL Hijacking Vulnerability

Adobe FrameMaker is a page layout software provided by the American company Audobee Adobe. A DLL hijacking vulnerability exists in Adobe Framemaker 1.0.5.1 and earlier versions. An attacker can exploit this vulnerability to elevate privileges...

Adobe Releases Security Patch Updates for 11 Vulnerabilities

Adobe has released its monthly security updates to address a total of 11 vulnerabilities in Adobe Digital Editions, Framemaker, and Technical Communications Suite, of which four are rated critical and rest 7 are important in severity. Adobe has also released updated versions for Flash Player, but...

Fuji Electric Energy Savings Estimator

1. EXECUTIVE SUMMARY CVSS v3 7.3 Vendor: Fuji Electric Equipment: Fuji Electric Energy Savings Estimator Vulnerability: Uncontrolled Search Path Element 2. RISK EVALUATION Successful exploitation of this vulnerability may allow an attacker to load a malicious DLL and execute code on the affected...

CVE-2018-6700

DLL Search Order Hijacking vulnerability in Microsoft Windows Client in McAfee True Key TK before 5.1.165 allows local users to execute arbitrary code via specially crafted malware...

Siemens TD Keypad Designer DLL Hijacking Vulnerability

Siemens TD Keypad Designer is a keyboard design program from Siemens Germany for Siemens TD 100C and other products. A DLL hijacking vulnerability exists in SIEMENS TD Keypad Designer all versions. An attacker could exploit the vulnerability to execute code with the privileges of the user running...

CVE-2018-13806

CVE-2018-13806 is a DLL hijacking vulnerability in Siemens TD Keypad Designer (all versions). The root cause is an uncontrolled search path element that could allow code execution with the user’s privileges when a TD project is opened. The attacker must have write access to the directory containi...

CVE-2018-13806

A vulnerability has been identified in SIEMENS TD Keypad Designer All versions. A DLL hijacking vulnerability exists in all versions of SIEMENS TD Keypad Designer which could allow an attacker to execute code with the permission of the user running TD Designer. The attacker must have write access...

CVE-2018-13806

A vulnerability has been identified in SIEMENS TD Keypad Designer All versions. A DLL hijacking vulnerability exists in all versions of SIEMENS TD Keypad Designer which could allow an attacker to execute code with the permission of the user running TD Designer. The attacker must have write access...

Design/Logic Flaw

A vulnerability has been identified in SIEMENS TD Keypad Designer All versions. A DLL hijacking vulnerability exists in all versions of SIEMENS TD Keypad Designer which could allow an attacker to execute code with the permission of the user running TD Designer. The attacker must have write access...

ICSA-18-254-03 Siemens TD Keypad Designer

1. EXECUTIVE SUMMARY CVSS v3 7.3 ATTENTION: Low skill level to exploit Vendor: Siemens Equipment: TD Keypad Designer Vulnerability: Uncontrolled Search Path Element 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a local low-privileged attacker to escalate their...

CVE-2018-5003

Adobe Creative Cloud Desktop Application before 4.5.5.342 installer has an insecure library loading dll hijacking vulnerability. Successful exploitation could lead to privilege escalation...