Privilege escalation

Adobe Creative Cloud Desktop Application before 4.5.5.342 installer has an insecure library loading dll hijacking vulnerability. Successful exploitation could lead to privilege escalation...

CVE-2018-5003

Adobe Creative Cloud Desktop Application installer (Windows) prior to version 4.5.5.342 is affected by an insecure library loading (DLL hijacking) vulnerability (CVE-2018-5003). The root cause is DLL loading during installation, enabling privilege escalation if an attacker can place a malicious l...

Dropbox 54.5.90 DLL Hijacking

Document Title: =============== Dropbox 54.4.90 - Multiples DLL Injection/Code Execution Date of Discovery: ================== 2018-08-24 Exploitation Technique: ======================= Local Platfom Tested: =============== Windows 10 Technical Details & Description:...

Microsoft Windows - Advanced Local Procedure Call (ALPC) Local Privilege Escalation

Microsoft Windows - Advanced Local Procedure Call ALPC Local Privilege Escalation Note: PoC will now hijack the print spooler service - spoolsv.exe - as it required less code then hijacking printfilterpipelinesvc.exe, which was shown in the original video demo Description of the vulnerability The...

Adobe Creative Cloud Desktop <= 4.5.0.324 Privilege Escalation Vulnerability (APSB18-20)

The version of Adobe Creative Cloud Desktop installed on the remote Windows host is 4.5.0.324 or earlier. It is, therefore, affected by a dll hijacking & privilege escalation vulnerability as noted in the APSB18-20 advisory. Note that Nessus has not tested for these issues but has instead relied...

DLL Hijacking Vulnerability in siemens TD Keypad Designer

TD Keypad Designer is siemens' specialized keyboard designer for TD 100C , TD 200C , TD 400C . siemens TD Keypad Designer V1.0.9.25 suffers from a DLL hijacking vulnerability when processing td1 files, which can be exploited by attackers to load a malicious dll and execute malicious code...

Microsoft DirectX SDK (June 2010) Xact3.exe DLL Hijacking

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-DIRECTX-SDK-XACT.EXE-TROJAN-FILE-CODE-EXECUTION.txt + ISR: Apparition Security Greetz: indoushka | Eduardo Vendor ============= www.microsoft.com Product ===========...

SMPlayer 18.6.0 DLL Hijacking

===================================================== Exploit Title : SMPlayer 18.6.0 - DLL Hijacking Code Execution Date Discovered : 2018-20-07 Affected Products: SMPlayer v18.6.0 - Software Exploitation Technique: Local Severity Level: Medium Tested OS : Windows 7 & Windows 10...

Sidify Music Converter 1.2.9 DLL Hijacking

===================================================== Exploit Title : Sidify Music Converter 1.2.9 - DLL Hijacking Code Execution Date Discovered : 2018-19-07 Affected Products: Sidify Music Converter v1.2.9 - Software Exploitation Technique: Local Severity Level: Medium Tested OS : Windows 7 &...

VMWare Player 7.1.3 DLL Hijacking

Hi @ll, on February 13, 2016, I sent a vulnerability report regarding the then current executable installer of VMware-player 7.1.3 to its vendor. On September 14, 2016, VMware published and I was NOT AMUSED that it took 7 month to fix this beginner's error. In January 2018, VMware published...

Quick Heal Anti-Virus Pro DLL Hijacking Vulnerability

Quick Heal Anti-Virus Pro is prone to a DLL hijacking vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Quick Heal Total Security DLL Hijacking Vulnerability

Quick Heal Total Security is prone to a DLL hijacking vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Quick Heal Internet Security DLL Hijacking Vulnerability

Quick Heal Internet Security is prone to a DLL hijacking vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Design/Logic Flaw

Quick Heal Total Security 64 bit 17.00 QHTS64.exe, QHTSFT64.exe - Version 10.0.1.38; Quick Heal Total Security 32 bit 17.00 QHTS32.exe, QHTSFT32.exe - Version 10.0.1.38; Quick Heal Internet Security 64 bit 17.00 QHIS64.exe, QHISFT64.exe - Version 10.0.0.37; Quick Heal Internet Security 32 bit 17....

CVE-2018-8090

Quick Heal Total Security 64 bit 17.00 QHTS64.exe, QHTSFT64.exe - Version 10.0.1.38; Quick Heal Total Security 32 bit 17.00 QHTS32.exe, QHTSFT32.exe - Version 10.0.1.38; Quick Heal Internet Security 64 bit 17.00 QHIS64.exe, QHISFT64.exe - Version 10.0.0.37; Quick Heal Internet Security 32 bit 17....

CVE-2018-8090

CVE-2018-8090 is a DLL hijacking vulnerability affecting Quick Heal products: Quick Heal Total Security, Internet Security, and Anti-Virus Pro across 32/64‑bit builds and several versions (Total Security 64/32‑bit v17.00 with 10.0.1.38; Internet Security 64/32‑bit v17.00 with 10.0.0.37; Anti‑Viru...

CVE-2018-8090

Quick Heal Total Security 64 bit 17.00 QHTS64.exe, QHTSFT64.exe - Version 10.0.1.38; Quick Heal Total Security 32 bit 17.00 QHTS32.exe, QHTSFT32.exe - Version 10.0.1.38; Quick Heal Internet Security 64 bit 17.00 QHIS64.exe, QHISFT64.exe - Version 10.0.0.37; Quick Heal Internet Security 32 bit 17....

Adobe Illustrator 'DLL Hijacking' RCE Vulnerability (APSB10-29) - Windows

Adobe Illustrator is prone to a SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:illustrator"; ifdescription...

CVE-2018-1458

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10,1, 10.5 and 11.1 could allow a local user to execute arbitrary code and conduct DLL hijacking attacks. IBM X-Force ID: 140209...

Code injection

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10,1, 10.5 and 11.1 could allow a local user to execute arbitrary code and conduct DLL hijacking attacks. IBM X-Force ID: 140209...