CVE-2016-10157

Akamai NetSession 1.9.3.1 is vulnerable to DLL Hijacking: it tries to load CSUNSAPI.dll without supplying the complete path. The issue is aggravated because the mentioned DLL is missing from the installation, thus making it possible to hijack the DLL and subsequently inject code within the Akamai...

CVE-2016-10157

Akamai NetSession 1.9.3.1 is vulnerable to DLL Hijacking: it tries to load CSUNSAPI.dll without supplying the complete path. The issue is aggravated because the mentioned DLL is missing from the installation, thus making it possible to hijack the DLL and subsequently inject code within the Akamai...

CVE-2016-10157

Akamai NetSession 1.9.3.1 is affected by CVE-2016-10157, a DLL hijacking vulnerability where the process loads CSUNSAPI.dll without a full path. The DLL is reportedly missing from the installation, which can enable a hijack and potential code injection into the Akamai NetSession process space. No...

CVE-2016-10157

Akamai NetSession 1.9.3.1 is vulnerable to DLL Hijacking: it tries to load CSUNSAPI.dll without supplying the complete path. The issue is aggravated because the mentioned DLL is missing from the installation, thus making it possible to hijack the DLL and subsequently inject code within the Akamai...

Advantech WebAccess Multiple Vulnerabilities

Advantech WebAccess is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

TinyPDF Installer DLL Hijacking / Unsafe Temp Directory

Hi @ll, the executable installer "InstallTinyPDF.exe", available from , is surprise.- vulnerable: 1. DLL hijacking this is well-known and well-documented; see , , , and "InstallTinyPDF.exe" loads and executes UXTheme.dll and/or DWMAPI.dll from its "application directory" instead Windows' "system...

SoftMaker Office 201x Privilege Escalation

Hi @ll, the service pack installers for SoftMaker Office 201x, available from , are surprise.- vulnerable. The executable installer OUCH ofw16763.exe, a 7z SFX OUCH, creates an UNPROTECTED directory "%TEMP%\7zSxxxxxxxx" to extract its payload, then executes "%TEMP%\7zSxxxxxxxx\spsetup.exe"...

PDFAdd 1.2 DLL Hijacking

===================================================== Exploit Title : PDfAdd 1.2 - DLL Hijacking Vulnerability Date Discovered : 2016-12-22 Affected Products: PDfAdd v1.2 - Software Exploitation Technique: Local Severity Level: Medium Tested OS : Windows 7...

Free M4A To MP3 Converter 9.3 DLL Hijacking

===================================================== Exploit Title : Free M4a to MP3 Converter 9.3 - DLL Hijacking Vulnerability Date Discovered : 2016-12-19 Affected Products: Free M4a to MP3 Converter v9.3 - Software Exploitation Technique: Local Severity Level: Medium Tested OS : Windows 7...

CVE-2016-3958/CVE-2016-3959: Golang vulnerabilities | Cloud Foundry

CVE-2016-3958/CVE-2016-3959: Golang vulnerabilities Medium Vendor Golang Versions Affected Golang versions prior to 1.5.4 and 1.6.x versions before 1.6.1 Description Untrusted search path vulnerability in Go before 1.5.4 and 1.6.x before 1.6.1 on Windows allows local users to gain privileges via ...

Popcorn Time 5.6 DLL Hijacking

===================================================== Exploit Title : Popcorn Time 5.6 - DLL Hijacking Vulnerability Date Discovered : 2016-12-20 Affected Products: Popcorn Time v5.6 - Software Exploitation Technique: Local Severity Level: Medium Tested OS : Windows 7...

Nidesoft MP3 Converter 2.6.18 DLL Hijacking

===================================================== Exploit Title : Nidesoft MP3 Converter 2.6.18 - DLL Hijacking Vulnerability Date Discovered : 2016-12-22 Affected Products: Nidesoft MP3 Converter v2.6.18 - Software Exploitation Technique: Local Severity Level: Medium Tested OS : Windows 7...

SIMATIC Manager Step7 5.5 SP1 DLL Hijacking

Exploit Title: SIMATIC Manager Step7 DLL Hijacking Cve : 2012-3015 Author: Ashiyane Digital Security Team Vendor Homepage: siemens.com Version: =5.5 SP1 Tested on:Windows 7 Exploit by : Amir.ght Description: Company Name: SIEMENS AG Product Name: SIEMENS STEP 7/S7TM Programmable Controller...

ABB Panel Builder 800 DLL Hijacking Vulnerability (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-16-077-01 ABB Panel Builder 800 DLL Hijacking Vulnerability that was published March 17, 2016, on the NCCIC/ICS-CERT web site. Ivan Sanchez from Nullcode Team has identified a DLL Hijacking vulnerability in the ABB...

Fedora 23 : mingw-nsis (2016-637618fcd4)

New upstream version 2.50. - Fixes serious DLL hijacking attack: https://sourceforge.net/p/nsis/bugs/1125/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as...

AOMEI Backupper Standard 3.5 DLL Hijacking

===================================================== Exploit Title : AOMEI Backupper Standard 3.5 - DLL Hijacking Vulnerability Date Discovered : 2016-10-19 Affected Products: AOMEI Backupper Standard v3.5 - Software Exploitation Technique: Local Severity Level: Medium Tested OS : Windows 7...

WonderShare Filmora 7.5.0 DLL Hijacking

===================================================== Exploit Title : WonderShare Filmora 7.5.0 - DLL Hijacking Vulnerability Date Discovered : 2016-10-15 Affected Products: Product: WonderShare Filmora v7.5.0 - Software Exploitation Technique: Local Severity Level: Medium Tested OS : Windows 7...

VideoCharge Studio DLL Hijacking

Exploit Title: VideoCharge Studio DLL Hijacking Exploit quserex.dll Date: 13-09-2016 Author: Ashiyane Digital Security Team Vendor Homepage:http://www.videocharge.com/ Software Link: http://www.videocharge.com/download/VideoChargeStudioInstall.exe Tested on:Windows 7...

Vivaldi 1.4.589.11 DLL Hijacking

Exploit Title: Vivaldi browser DLL Hijacking Author: Ashiyane Digital Security Team Vendor Homepage: https://vivaldi.com/ software link: https://downloads.vivaldi.com/stable/Vivaldi.1.4.589.11.exe Tested on:Windows 7 Date: 13-09-2016...

Adobe Reader 9.3.0 DLL Hijacking

===================================================== Adobe Reader 9.3.0 - DLL Hijacking ===================================================== Vendor Homepage: https://www.adobe.com/ Date: 24 Oct 2016 Version : 9.3.0 Author: Ashiyane Digital Security Team Contact: [email protected]...